{"id":33512,"date":"2019-10-31T21:53:01","date_gmt":"2019-10-31T18:53:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh\/"},"modified":"2019-10-31T21:53:01","modified_gmt":"2019-10-31T18:53:01","slug":"i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh","title":{"rendered":"\u00abBit \u0107e dovoljno\u00bb: \u0161to obla\u010dni pru\u017eatelji usluga ne govore o osobnim podacima","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Jednom je stigla prijava za usluge oblaka. Razmislili smo o tome \u0161to \u0107e nam biti potrebno i poslali smo popis pitanja za poja\u0161njenje detalja. Zatim smo analizirali odgovore i shvatili: klijent \u017eeli pohraniti osobne podatke drugog stupnja za\u0161tite u oblaku. Odgovaramo mu: \u201eImate drugi stupanj osobnih podataka, na\u017ealost, mo\u017eemo napraviti samo privatni oblak.\u201c A on: \u201eZnate, u kompaniji X mogu sve to i u javnom oblak staviti.\u201d<\/p>\n<p><img decoding=\"async\" alt=\"\u00abBit \u0107e dovoljno\u00bb: \u0161to obla\u010dni pru\u017eatelji usluga ne govore o osobnim podacima\" src=\"\/wp-content\/uploads\/2019\/05\/ecdf0e89fcf51a1eba70760eaf299977.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Foto: Steve Crisp, Reuters<\/i><\/p>\n<p>\u010cudna stvar! Oti\u0161li smo na web stranicu kompanije X, prou\u010dili njihovu dokumentaciju o certifikaciji, klimaju\u0107i glavama shvatili smo: ima puno otvorenih pitanja o pohrani osobnih podataka i ona se trebaju dobro razjasniti. \u010cime \u0107emo se baviti u ovom postu.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Kako bi sve trebalo funkcionirati<\/h2>\n<p>\nPrvo \u0107emo razjasniti po kojim se zna\u010dajkama osobni podaci uop\u0107e odredjuju u koji stupanj za\u0161tite pripadaju. To ovisi o kategoriji podataka, o broju subjekata tih podataka koje operator pohranjuje i obra\u0111uje, kao i o vrsti aktualnih prijetnji.<\/p>\n<p><img decoding=\"async\" alt=\"\u00abBit \u0107e dovoljno\u00bb: \u0161to obla\u010dni pru\u017eatelji usluga ne govore o osobnim podacima\" src=\"\/wp-content\/uploads\/2019\/05\/0f498c9736f80f539fcccaddaaf5526d.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDefinicija tipova aktualnih prijetnji navedena je u <noindex><a rel=\"nofollow\" href=\"http:\/\/pravo.gov.ru\/proxy\/ips\/?docbody=&amp;link_id=7&amp;nd=102160483\">Uredbi Vlade Ruske Federacije br. 1119<\/a><\/noindex> od 1. studenog 2012. godine \u201eO odobrenju zahtjeva za za\u0161titu osobnih podataka prilikom njihove obrade u informacijskim sustavima osobnih podataka\u201c:<\/p>\n<blockquote><p>\u201ePrijetnje prvog tipa su aktualne za informacijski sustav ako su za njega tako\u0111er <i>aktualne prijetnje povezane<\/i> s postojanjem nedokumentiranih (nedeklairanih) mogu\u0107nosti <i>u sustavnom softveru<\/i>, koji se koristi u informacijskom sustavu.<\/p>\n<p>Prijetnje drugog tipa su aktualne za informacijski sustav ako su za njega tako\u0111er <i>aktualne prijetnje povezane<\/i> s postojanjem nedokumentiranih (nedeklairanih) mogu\u0107nosti <i>u aplikacijskom softveru.<\/i>, koji se koristi u informacijskom sustavu.<\/p>\n<p>Prijetnje tre\u0107eg tipa su aktualne za informacijski sustav ako su za njega <i>aktualne prijetnje, koje nisu povezane<\/i> s postojanjem nedokumentiranih (nedeklairanih) mogu\u0107nosti <i>u sustavnom i aplikacijskom softveru<\/i>, koji se koristi u informacijskom sustavu.\u201c<\/p><\/blockquote>\n<p>\nGlavna to\u010dka u ovim definicijama je postojanje nedokumentiranih (nedeklariranih) mogu\u0107nosti. Za potvrdu odsutnosti nedokumentiranih mogu\u0107nosti u softveru (u slu\u010daju oblaka to je hipervizor) provodi se certifikacija FSTEK Rusije. Ako operator osobnih podataka prihvati da takve mogu\u0107nosti u softveru ne postoje, tada su i odgovaraju\u0107e prijetnje neaktualne. Prijetnje prvog i drugog tipa operatori osobnih podataka rijetko smatraju aktualnima.<\/p>\n<p>Osim odre\u0111ivanja nivoa za\u0161tite osobnih podataka, operator tako\u0111er mora utvrditi specifi\u010dne aktualne prijetnje za javnu oblaku i, oslanjaju\u0107i se na utvr\u0111eni nivo za\u0161tite osobnih podataka i aktualne prijetnje, definirati potrebne mjere i sredstva za\u0161tite od njih.<\/p>\n<p>U FSTEK-u su sve glavne prijetnje jasno navedene u <noindex><a rel=\"nofollow\" href=\"https:\/\/bdu.fstec.ru\/\">BDU<\/a><\/noindex> (bazi podataka prijetnji). Pru\u017eatelji usluga i ovla\u0161tenici oblaka koriste ovu bazu u svom radu. Evo primjera prijetnji:<\/p>\n<blockquote><p><noindex><a rel=\"nofollow\" href=\"https:\/\/bdu.fstec.ru\/threat\/ubi.044\">UBI.44<\/a><\/noindex>: \u00abPrijetnja se odnosi na mogu\u0107nost ugro\u017eavanja sigurnosti korisni\u010dkih podataka programa koji rade unutar virtualne ma\u0161ine, zlonamjernim softverom koji djeluje izvan virtualne ma\u0161ine\u00bb. Ova prijetnja je uzrokovana prisutno\u0161\u0107u ranjivosti softvera hipervizora, koji osigurava izolaciju adresnog prostora koji se koristi za pohranu korisni\u010dkih podataka programa koji djeluju unutar virtualne ma\u0161ine, od neovla\u0161tenog pristupa zlonamjernog softvera koji djeluje izvan virtualne ma\u0161ine.<\/p>\n<p>Provo\u0111enje ove prijetnje mogu\u0107e je pod uvjetom uspje\u0161nog prevladavanja granica virtualne ma\u0161ine od strane zlonamjernog koda, ne samo iskori\u0161tavanjem ranjivosti hipervizora, ve\u0107 i takvim uticajem na ni\u017eim (u odnosu na hipervizor) nivoima rada sistema.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/bdu.fstec.ru\/threat\/ubi.101\">UBI.101<\/a><\/noindex>: \u00abPrijetnja se odnosi na mogu\u0107nost neovla\u0161tenog pristupa za\u0161ti\u0107enim informacijama jednog korisnika oblaka od strane drugog. Ova prijetnja je uzrokovana time \u0161to se, zbog specifi\u010dnosti oblaka, korisnici usluga oblaka primoravaju na zajedni\u010dko kori\u0161tenje iste infrastrukture oblaka. Provo\u0111enje ove prijetnje mogu\u0107e je u slu\u010daju gre\u0161aka prilikom razdvajanja elemenata infrastrukture oblaka me\u0111u korisnicima usluga oblaka, kao i prilikom izolacije njihovih resursa i razgrani\u010denja podataka jedni od drugih.<\/p><\/blockquote>\n<p>\nZa\u0161tita od ovih prijetnji mogu\u0107a je samo putem hipervizora, budu\u0107i da on upravlja virtualnim resursima. Stoga se hipervizor mora smatrati sredstvom za\u0161tite.<\/p>\n<p>I u skladu s <noindex><a rel=\"nofollow\" href=\"https:\/\/fstec.ru\/normotvorcheskaya\/akty\/53-prikazy\/691-prikaz-fstek-rossii-ot-18-fevralya-2013-g-n-21\">uputom FSTEK broj 21<\/a><\/noindex> od 18. velja\u010de 2013., hipervizor mora pro\u0107i certifikaciju za odsutnost NDU prema 4. razini, ina\u010de \u0107e kori\u0161tenje osobnih podataka 1. i 2. razine s njim biti nezakonito (<i>\u00abp.12. \u2026 Za osiguranje 1. i 2. razine za\u0161tite osobnih podataka, kao i za osiguranje 3. razine za\u0161tite osobnih podataka u informacijskim sustavima, za koje su aktualne prijetnje 2. tipa, primjenjuju se sredstva za\u0161tite informacija \u010diji je softver pro\u0161ao provjeru ne ni\u017ee od 4. razine kontrole odsutnosti nedeklariranih mogu\u0107nosti\u00bb<\/i>).<\/p>\n<p>Potrebnom razinom certifikacije, NDU-4, raspola\u017ee samo jedan hipervizor, doma\u0107e proizvodnje \u2014 <noindex><a rel=\"nofollow\" href=\"http:\/\/gorizont-vs.ru\/\">Horizont VC<\/a><\/noindex>. Blago re\u010deno, nije najpopularnije rje\u0161enje. Komercijalni obla\u010dni sustavi obi\u010dno se grade na temelju VMware vSphere, KVM, Microsoft Hyper-V. Nijedan od tih proizvoda nema certifikaciju za NDU-4. Za\u0161to? Vjerojatno, stjecanje takve certifikacije za proizvo\u0111a\u010de trenutno nije ekonomi\u010dna odluka.<\/p>\n<p>I ostaje nam za osobne podatke 1. i 2. razine u javnom oblaku samo Horizont VC. Tu\u017eno, ali istinito.<\/p>\n<h3>Kako sve (prema na\u0161em mi\u0161ljenju) zapravo funkcionira<\/h3>\n<p>\nNa prvi pogled, sve izgleda dovoljno strogo: navedene prijetnje trebaju se otkloniti pravilnim pode\u0161avanjem ugra\u0111enih mehanizama za\u0161tite hipervizora, certificiranog prema NDU-4. No postoji jedna rupa. U skladu s Naredbom FSTEC br. 21 (<i>\u00abp.2 Sigurnost osobnih podataka prilikom njihove obrade u informacijskom sustavu osobnih podataka (dalje \u2014 informacijski sustav) osigurava operater ili osoba koja obra\u0111uje osobne podatke po nalogu operatera u skladu s <noindex><a rel=\"nofollow\" href=\"http:\/\/about:blank\">zakonodavstvom<\/a><\/noindex> Ruske Federacije\u00bb<\/i>), pru\u017eatelji samostalno procjenjuju relevantnost mogu\u0107ih prijetnji i u skladu s tim odabiru mjere za\u0161tite. Stoga, ako ne prihvate prijetnje UBI.44 i UBI.101 kao aktualne, ne\u0107e biti potrebe za kori\u0161tenjem hipervizora certificiranog prema NDU-4, koji bi trebao osigurati za\u0161titu od njih. I to \u0107e biti dovoljno za dobivanje certifikata sukladnosti javnog oblaka za 1. i 2. razinu za\u0161tite osobnih podataka, \u010dime \u0107e biti potpuno zadovoljno Roskomnadzor.<\/p>\n<p>Naravno, osim Roskomnadzora, FSTEK tako\u0111er mo\u017ee provesti provjeru \u2014 a ta organizacija je daleko temeljitija u tehni\u010dkim pitanjima. Zasigurno \u0107e ih zanimati za\u0161to su to\u010dno prijetnje UBI.44 i UBI.101 progla\u0161ene neaktualnima? No, obi\u010dno FSTEK provodi inspekcije samo kada dobiju informacije o nekom upe\u010datljivom incidentu. U tom slu\u010daju, savezna slu\u017eba prvo dolazi do operatera osobnih podataka \u2014 odnosno naru\u010ditelja oblaka. U najgorem slu\u010daju, operater dobiva manju kaznu \u2014 primjerice, za Twitter na po\u010detku godine <noindex><a rel=\"nofollow\" href=\"https:\/\/vc.ru\/legal\/59169-roskomnadzor-sostavil-protokol-o-pravonarushenii-twitter\">kazna<\/a><\/noindex> u sli\u010dnom slu\u010daju iznosila je 5000 rubalja. Tada FSTEK ide dalje, prema pru\u017eatelju usluga oblaka. Koji mo\u017ee biti li\u0161en licence zbog neispunjavanja normativnih zahtjeva \u2014 a to su ve\u0107 posve drugi rizici, kako za pru\u017eatelja oblaka, tako i za njegove klijente. No, ponavljam, <i>za provjeru FSTEK obi\u010dno treba jasan povod.<\/i> Tako da su pru\u017eatelji oblaka spremni preuzeti rizik. Do prvog ozbiljnog incidenta. <\/p>\n<p>Postoji jo\u0161 jedna grupa 'odgovornijih' pru\u017eatelja koji smatraju da se sve prijetnje mogu zatvoriti dodavanjem hipervizoru dodatka poput vGate. No u raspore\u0111enom virtualnom okru\u017eenju izme\u0111u naru\u010ditelja, za neke prijetnje (primjerice, prethodno spomenuta UBI.101) u\u010dinkovit mehanizam za\u0161tite mo\u017ee se provesti samo na razini hipervizora koji je certificiran prema NDV-4, jer bilo koji sustavi-dodatci ne utje\u010du na standardne funkcije rada hipervizora u upravljanju resursima (konkretno, operativnom memorijom).<\/p>\n<h3>Kako radimo mi<\/h3>\n<p>\nImamo obla\u010dni segment temeljen na hipervizoru koji je certificiran od strane FSTEK-a (ali bez certifikacije prema NDV-4). Ovaj segment je atestiran, tako da se u oblaku na toj osnovi mogu smje\u0161tati osobni podaci <i>3 i 4 razine za\u0161tite<\/i> \u2014 zahtjevi za za\u0161titu od nedeklariranih mogu\u0107nosti ovdje se ne moraju po\u0161tivati. Evo, uzgred, arhitektura na\u0161eg za\u0161ti\u0107enog segmenta oblaka:<\/p>\n<p><img decoding=\"async\" alt=\"\u00abBit \u0107e dovoljno\u00bb: \u0161to obla\u010dni pru\u017eatelji usluga ne govore o osobnim podacima\" src=\"\/wp-content\/uploads\/2019\/05\/05a21f4a6a15ff7db3ea83a4bf2f13c5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSustavi za osobne podatke <i>1 i 2 razine za\u0161tite<\/i> Realiziramo isklju\u010divo na posve\u0107enom hardveru. Samo u ovom slu\u010daju, primjerice, prijetnja UBI.101 doista nije relevantna, budu\u0107i da serverske jedinice koje nisu povezane jednom virtualnom sredinom ne mogu utjecati jedna na drugu, \u010dak ni kada su smje\u0161tene u jednom podatkovnom centru. Za takve slu\u010dajeve nudimo uslugu najma posve\u0107enog hardvera (tako\u0111er poznatu kao Hardware as a Service, oprema kao usluga).<\/p>\n<p>Ako niste sigurni koji nivo za\u0161tite je potreban za va\u0161 sustav osobnih podataka, tako\u0111er poma\u017eemo u njihovoj klasifikaciji.<\/p>\n<h3>Izvje\u0161taj<\/h3>\n<p>\nNa\u0161e malo istra\u017eivanje tr\u017ei\u0161ta pokazalo je: neki cloud operateri spremni su riskirati i sigurno\u0161\u0107u podataka klijenata i vlastitom budu\u0107no\u0161\u0107u kako bi dobili narud\u017ebu. No, u ovim pitanjima dr\u017eimo se druga\u010dije politike koju smo ukratko opisali malo vi\u0161e. Bit \u0107emo sretni odgovoriti na va\u0161a pitanja u komentarima.<br \/>\n<br \/>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/croccloudteam\/blog\/451528\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0448\u043b\u0430 \u043a\u0430\u043a-\u0442\u043e \u043a \u043d\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0430 \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0438 \u043e\u0431\u043b\u0430\u043a\u0430. \u041c\u044b \u043f\u0440\u0438\u043a\u0438\u043d\u0443\u043b\u0438 \u0432 \u043e\u0431\u0449\u0438\u0445 \u0447\u0435\u0440\u0442\u0430\u0445, \u0447\u0442\u043e \u043e\u0442 \u043d\u0430\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0442\u043e\u0447\u043d\u0435\u043d\u0438\u044f \u0434\u0435\u0442\u0430\u043b\u0435\u0439. \u0417\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0432\u0435\u0442\u044b \u0438 \u043f\u043e\u043d\u044f\u043b\u0438: \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a \u0445\u043e\u0447\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0442\u044c \u0432 \u043e\u0431\u043b\u0430\u043a\u0435 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u041e\u0442\u0432\u0435\u0447\u0430\u0435\u043c \u0435\u043c\u0443: \u00ab\u0423 \u0432\u0430\u0441 \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0435\u0440\u0441\u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u0432\u0438\u043d\u0438\u0442\u0435, \u043c\u043e\u0436\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u0442\u043d\u043e\u0435 \u043e\u0431\u043b\u0430\u043a\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c\u00bb. \u0410 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25212,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33512","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0448\u043b\u0430 \u043a\u0430\u043a-\u0442\u043e \u043a \u043d\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0430 \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0438 \u043e\u0431\u043b\u0430\u043a\u0430. \u041c\u044b \u043f\u0440\u0438\u043a\u0438\u043d\u0443\u043b\u0438 \u0432 \u043e\u0431\u0449\u0438\u0445 \u0447\u0435\u0440\u0442\u0430\u0445, \u0447\u0442\u043e \u043e\u0442 \u043d\u0430\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0442\u043e\u0447\u043d\u0435\u043d\u0438\u044f \u0434\u0435\u0442\u0430\u043b\u0435\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u00ab\u0418 \u0442\u0430\u043a \u0441\u043e\u0439\u0434\u0435\u0442\u00bb: \u0447\u0442\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u043d\u0435 \u0434\u043e\u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u044e\u0442 \u043e \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0448\u043b\u0430 \u043a\u0430\u043a-\u0442\u043e \u043a \u043d\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0430 \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0438 \u043e\u0431\u043b\u0430\u043a\u0430. \u041c\u044b \u043f\u0440\u0438\u043a\u0438\u043d\u0443\u043b\u0438 \u0432 \u043e\u0431\u0449\u0438\u0445 \u0447\u0435\u0440\u0442\u0430\u0445, \u0447\u0442\u043e \u043e\u0442 \u043d\u0430\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0442\u043e\u0447\u043d\u0435\u043d\u0438\u044f \u0434\u0435\u0442\u0430\u043b\u0435\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:53:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:53:01+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\"I tako \u0107e pro\u0107i\": \u0161to cloud pru\u017eatelji ne spominju o osobnim podacima | ProHoster","description":"Jednom nam je stigla prijava za usluge oblaka. Sagledali smo uop\u0161teno \u0161to \u0107e nam biti potrebno i poslali odgovor s popisom pitanja za razja\u0161njavanje detalja.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u00ab\u0418 \u0442\u0430\u043a \u0441\u043e\u0439\u0434\u0435\u0442\u00bb: \u0447\u0442\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u043d\u0435 \u0434\u043e\u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u044e\u0442 \u043e \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 | ProHoster","og:description":"\u041f\u0440\u0438\u0448\u043b\u0430 \u043a\u0430\u043a-\u0442\u043e \u043a \u043d\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0430 \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0438 \u043e\u0431\u043b\u0430\u043a\u0430. \u041c\u044b \u043f\u0440\u0438\u043a\u0438\u043d\u0443\u043b\u0438 \u0432 \u043e\u0431\u0449\u0438\u0445 \u0447\u0435\u0440\u0442\u0430\u0445, \u0447\u0442\u043e \u043e\u0442 \u043d\u0430\u0441 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0442\u043e\u0447\u043d\u0435\u043d\u0438\u044f \u0434\u0435\u0442\u0430\u043b\u0435\u0439.","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/i-tak-sojdet-chto-oblachnye-provajdery-ne-dogovarivayut-o-personalnyh-dannyh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:01+00:00","article:modified_time":"2019-10-31T18:53:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33512","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:35:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:39:23","updated":"2026-01-21 15:35:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/33512","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=33512"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/33512\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/25212"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=33512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=33512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=33512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}