{"id":94450,"date":"2020-09-17T07:42:44","date_gmt":"2020-09-17T05:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost"},"modified":"2020-09-17T07:42:44","modified_gmt":"2020-09-17T05:42:44","slug":"iaas-152-fz-itak-vam-nuzhna-bezopasnost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost","title":{"rendered":"IaaS 152-FZ: tak\u017ee, potrebujete bezpe\u010dnos\u0165","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"IaaS 152-FZ: tak\u017ee, potrebujete bezpe\u010dnos\u0165\" src=\"\/wp-content\/uploads\/2020\/09\/d91a5d152754f82316e0027fd3447b53.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Nech sa akoko\u013evek rozoberaj\u00fa m\u00fdty a legendy obklopuj\u00face s\u00falad s 152-FZ, nie\u010do v\u017edy zost\u00e1va za oponou. Dnes chceme prediskutova\u0165 nie v\u017edy o\u010dividn\u00e9 nuansy, s ktor\u00fdmi sa m\u00f4\u017eu stretn\u00fa\u0165 ako ve\u013ek\u00e9 spolo\u010dnosti, tak aj \u00faplne mal\u00e9 podniky:<\/p>\n<ul>\n<li>\n<p>nuansy klasifik\u00e1cie PDU pod\u013ea kateg\u00f3ri\u00ed \u2014 ke\u010f mal\u00fd internetov\u00fd obchod zbiera \u00fadaje t\u00fdkaj\u00face sa \u0161peci\u00e1lnej kateg\u00f3rie ani o tom nevediac;<\/p>\n<\/li>\n<li>\n<p>kde je mo\u017en\u00e9 uchov\u00e1va\u0165 z\u00e1lohy zhroma\u017eden\u00fdch PDU a vykon\u00e1va\u0165 nad nimi oper\u00e1cie;<\/p>\n<\/li>\n<li>\n<p>\u010d\u00edm sa l\u00ed\u0161i osved\u010denie a z\u00e1ver o s\u00falade, ak\u00e9 v\u00f4bec dokumenty \u017eiada\u0165 od poskytovate\u013ea a v\u0161etko v takom duchu.<\/p>\n<\/li>\n<\/ul>\n<p>Na z\u00e1ver sa s vami podel\u00edme o vlastn\u00e9 sk\u00fasenosti s procesom certifik\u00e1cie. Po\u010fme na to!<\/p>\n<p><em>Expertom v dne\u0161nom \u010dl\u00e1nku bude<strong> Alexej Afanasyev<\/strong>, odborn\u00edk na ot\u00e1zky kybernetickej bezpe\u010dnosti cloudov\u00fdch poskytovate\u013eov \u201eIT-GRAD\u201c a #CloudMTS (s\u00fa s\u00fa\u010das\u0165ou skupiny MTS).<\/em><\/p>\n<h2>Nuansy klasifik\u00e1cie<\/h2>\n<p>\u010casto sa stret\u00e1vame s t\u00fa\u017ebou klienta r\u00fdchlo, bez auditu IS, ur\u010di\u0165 po\u017eadovan\u00fa \u00farove\u0148 ochrany pre ISPD. Niektor\u00e9 materi\u00e1ly na internete na t\u00fato t\u00e9mu vytv\u00e1raj\u00fa falo\u0161n\u00fd dojem, \u017ee ide o jednoduch\u00fa \u00falohu a urobi\u0165 chybu je dos\u0165 \u0165a\u017ek\u00e9.<\/p>\n<p>Na ur\u010denie \u00farovne ochrany je potrebn\u00e9 ch\u00e1pa\u0165, ak\u00e9 \u00fadaje bud\u00fa zbieran\u00e9 a spracov\u00e1van\u00e9 IS klienta. Niekedy je \u0165a\u017ek\u00e9 jednozna\u010dne ur\u010di\u0165 po\u017eiadavky na ochranu a kateg\u00f3riu PDU, s ktor\u00fdmi podnik operuje. R\u00f4zne typy osobn\u00fdch \u00fadajov m\u00f4\u017eu by\u0165 \u00faplne inak hodnoten\u00e9 a klasifikovan\u00e9. Preto sa v niektor\u00fdch pr\u00edpadoch m\u00f4\u017ee n\u00e1zor podnikania rozch\u00e1dza\u0165 s n\u00e1zorom aud\u00edtora alebo dokonca kontrol\u00f3ra. Pozrime sa na nieko\u013eko pr\u00edkladov.<\/p>\n<p><strong>Autopark.<\/strong> Na prv\u00fd poh\u013ead ide o tradi\u010dn\u00fd sp\u00f4sob podnikania. Mnoh\u00e9 autodopravy funguj\u00fa desa\u0165ro\u010dia a ich vlastn\u00edci zamestn\u00e1vaj\u00fa SZ\u010cO a fyzick\u00e9 osoby. Zvy\u010dajne sa \u00fadaje zamestnancov pova\u017euj\u00fa za relevantn\u00e9 pod\u013ea predpisu UZ-4. Av\u0161ak na pr\u00e1cu s vodi\u010dmi nie je potrebn\u00e9 len zbiera\u0165 ankety, ale aj vykon\u00e1va\u0165 zdravotn\u00e9 kontroly priamo v autodoprave pred za\u010diatkom slu\u017eby, pri\u010dom zhroma\u017eden\u00e9 inform\u00e1cie spadaj\u00fa do kateg\u00f3rie zdravotn\u00fdch \u00fadajov \u2013 teda osobn\u00fdch \u00fadajov \u0161peci\u00e1lnej kateg\u00f3rie. Okrem toho m\u00f4\u017ee autodoprava po\u017eadova\u0165 potvrdenia, ktor\u00e9 bud\u00fa n\u00e1sledne ulo\u017een\u00e9 v dokument\u00e1cii vodi\u010da. Sken tak\u00e9ho potvrdenia v elektronickej podobe obsahuje \u00fadaje o zdravotnom stave, osobn\u00e9 \u00fadaje \u0161peci\u00e1lnej kateg\u00f3rie. To znamen\u00e1, \u017ee u\u017e nesta\u010d\u00ed predpis UZ-4, minim\u00e1lne je potrebn\u00e9 UZ-3.<\/p>\n<p><strong>Internetov\u00fd obchod. <\/strong>Na prv\u00fd poh\u013ead sa zd\u00e1, \u017ee zbieran\u00e9 men\u00e1, e-maily a telef\u00f3nne \u010d\u00edsla spadaj\u00fa do verejne pr\u00edstupnej kateg\u00f3rie. Av\u0161ak ak va\u0161i z\u00e1kazn\u00edci uv\u00e1dzaj\u00fa gastronomick\u00e9 preferencie, ako s\u00fa halal alebo ko\u0161er, tak\u00e9to inform\u00e1cie m\u00f4\u017eu by\u0165 pova\u017eovan\u00e9 za \u00fadaje o n\u00e1bo\u017eenskej pr\u00edslu\u0161nosti a presved\u010deniach. Preto m\u00f4\u017ee kontrol\u00f3r pri kontrole alebo vykon\u00e1van\u00ed in\u00fdch kontroln\u00fdch opatren\u00ed zaradi\u0165 zhroma\u017eden\u00e9 \u00fadaje do \u0161peci\u00e1lnej kateg\u00f3rie osobn\u00fdch \u00fadajov. Keby internetov\u00fd obchod zbieral inform\u00e1cie o tom, \u010di jeho kupuj\u00faci preferuje m\u00e4so alebo rybu, \u00fadaje by mohli patri\u0165 do kateg\u00f3rie in\u00fdch osobn\u00fdch \u00fadajov. Mimochodom, \u010do robi\u0165 s vegetari\u00e1nmi? To sa tie\u017e m\u00f4\u017ee pova\u017eova\u0165 za filozofick\u00e9 presved\u010denia, ktor\u00e9 s\u00fa taktie\u017e zaraden\u00e9 do \u0161peci\u00e1lnej kateg\u00f3rie. Na druhej strane to m\u00f4\u017ee by\u0165 len postoj \u010dloveka, ktor\u00fd vyl\u00fa\u010dil m\u00e4so zo svojej stravy. \u017dia\u013e, neexistuje \u017eiadny preh\u013ead, ktor\u00fd by jednozna\u010dne ur\u010dil kateg\u00f3riu osobn\u00fdch \u00fadajov v tak\u00fdchto 'jemn\u00fdch' situ\u00e1ci\u00e1ch.<\/p>\n<p><strong>Reklamn\u00e1 agent\u00fara <\/strong>pomocou akejko\u013evek z\u00e1padnej cloudovej slu\u017eby spracov\u00e1va verejn\u00e9 \u00fadaje svojich klientov \u2014 men\u00e1, e-mailov\u00e9 adresy a telef\u00f3nne \u010d\u00edsla. Tieto \u00fadaje samozrejme patr\u00ed do kateg\u00f3rie osobn\u00fdch \u00fadajov. Vznik\u00e1 ot\u00e1zka: je leg\u00e1lne uskuto\u010d\u0148ova\u0165 tak\u00e9to spracovanie? Je mo\u017en\u00e9 v\u00f4bec pren\u00e1\u0161a\u0165 tieto \u00fadaje bez anonymiz\u00e1cie za hranice SR, napr\u00edklad uchov\u00e1va\u0165 z\u00e1lohy v nejak\u00fdch zahrani\u010dn\u00fdch cloudov\u00fdch slu\u017eb\u00e1ch? Samozrejme, \u017ee je. Agent\u00fara m\u00e1 pr\u00e1vo uchov\u00e1va\u0165 tieto \u00fadaje aj mimo Slovenska, av\u0161ak prvotn\u00fd zber, pod\u013ea na\u0161ej legislat\u00edvy, mus\u00ed prebieha\u0165 na \u00fazem\u00ed SR. Ak z\u00e1lohujete tak\u00e9to inform\u00e1cie, pl\u00e1nujete na ich z\u00e1klade vytvori\u0165 nejak\u00fa \u0161tatistiku, vykon\u00e1vate prieskum alebo realizujete s nimi nejak\u00e9 in\u00e9 oper\u00e1cie \u2014 to v\u0161etko m\u00f4\u017eete robi\u0165 aj na z\u00e1padn\u00fdch platform\u00e1ch. K\u013e\u00fa\u010dov\u00fd moment z h\u013eadiska legislat\u00edvy \u2014 kde prebieha zber osobn\u00fdch \u00fadajov. Preto je d\u00f4le\u017eit\u00e9 nezamie\u0148a\u0165 p\u00f4vodn\u00fd zber a spracovanie.<\/p>\n<p>Ako vypl\u00fdva z t\u00fdchto kr\u00e1tkych pr\u00edkladov, pr\u00e1ca s osobn\u00fdmi \u00fadajmi nie je v\u017edy jednozna\u010dn\u00e1 a jednoduch\u00e1. Je potrebn\u00e9 nielen vedie\u0165, \u017ee s nimi pracujete, ale aj vedie\u0165 ich spr\u00e1vne klasifikova\u0165, ch\u00e1pa\u0165, ako funguje informa\u010dn\u00fd syst\u00e9m, aby ste spr\u00e1vne ur\u010dili po\u017eadovan\u00fa \u00farove\u0148 ochrany. V niektor\u00fdch pr\u00edpadoch sa m\u00f4\u017ee objavi\u0165 ot\u00e1zka, ak\u00fd objem osobn\u00fdch \u00fadajov je naozaj potrebn\u00fd organiz\u00e1cii na pr\u00e1cu. Je mo\u017en\u00e9 vzda\u0165 sa najviac \u201ez\u00e1va\u017en\u00fdch\u201c alebo jednoducho nadbyto\u010dn\u00fdch d\u00e1t? Okrem toho regul\u00e1tor odpor\u00fa\u010da anonymizova\u0165 osobn\u00e9 \u00fadaje tam, kde je to mo\u017en\u00e9.&nbsp;<\/p>\n<p>Ako v pr\u00edkladoch vy\u0161\u0161ie, niekedy sa m\u00f4\u017eete stretn\u00fa\u0165 s t\u00fdm, \u017ee kontroln\u00e9 org\u00e1ny interpretuj\u00fa zhroma\u017eden\u00e9 osobn\u00e9 \u00fadaje trochu inak, ako ste ich vy sami pos\u00fadili.<\/p>\n<p>Samozrejme, m\u00f4\u017eete si na pomoc vzia\u0165 aud\u00edtora alebo syst\u00e9mov\u00e9ho integr\u00e1tora, ale bude \u201epomocn\u00edk\u201c zodpovedn\u00fd za zvolen\u00e9 rozhodnutia v pr\u00edpade kontroly? Treba poznamena\u0165, \u017ee zodpovednos\u0165 v\u017edy spo\u010d\u00edva na vlastn\u00edku IS osobn\u00fdch \u00fadajov \u2013 oper\u00e1torovi osobn\u00fdch \u00fadajov. Preto je, ke\u010f spolo\u010dnos\u0165 vykon\u00e1va tak\u00e9to pr\u00e1ce, d\u00f4le\u017eit\u00e9 obr\u00e1ti\u0165 sa na v\u00e1\u017enych hr\u00e1\u010dov na trhu t\u00fdchto slu\u017eieb, napr\u00edklad na spolo\u010dnosti, ktor\u00e9 vykon\u00e1vaj\u00fa certifika\u010dn\u00e9 pr\u00e1ce. Certifika\u010dn\u00e9 spolo\u010dnosti maj\u00fa ve\u013ek\u00e9 sk\u00fasenosti s vykon\u00e1van\u00edm t\u00fdchto pr\u00e1c.<\/p>\n<h2>Mo\u017enosti budovania syst\u00e9mu spr\u00e1vy osobn\u00fdch \u00fadajov<\/h2>\n<p>Vytv\u00e1ranie ISPDn nie je iba technick\u00e1, ale aj do ve\u013ekej miery pr\u00e1vna ot\u00e1zka. IT riadite\u013e alebo riadite\u013e bezpe\u010dnosti sa mus\u00ed ur\u010dite poradi\u0165 s pr\u00e1vnikom. Ke\u010f\u017ee v spolo\u010dnosti nie je v\u017edy \u0161pecialista s potrebn\u00fdm profilom, stoj\u00ed za to pozrie\u0165 sa na aud\u00edtorov alebo konzultantov. Mnoh\u00e9 z nejasnost\u00ed m\u00f4\u017eu by\u0165 rozhodne nie tak o\u010dividn\u00e9.<\/p>\n<p>Konzult\u00e1cia pom\u00f4\u017ee ur\u010di\u0165, s ak\u00fdmi osobn\u00fdmi \u00fadajmi pracujete a ak\u00fa \u00farove\u0148 ochrany potrebuj\u00fa. Na z\u00e1klade toho z\u00edskate predstavu o IS, ktor\u00fa je potrebn\u00e9 vytvori\u0165 alebo doplni\u0165 o ochrann\u00e9 prostriedky a ORD.<\/p>\n<p>\u010casto stoj\u00ed v\u00fdber pred spolo\u010dnos\u0165ou na dvoch mo\u017enostiach:<\/p>\n<ol>\n<li>\n<p>Vytvori\u0165 pr\u00edslu\u0161n\u00fd IS na vlastn\u00fdch softv\u00e9rov\u00fdch a hardv\u00e9rov\u00fdch rie\u0161eniach, mo\u017eno vo vlastnej serverovni.<\/p>\n<\/li>\n<li>\n<p>Obr\u00e1ti\u0165 sa na cloudov\u00e9ho poskytovate\u013ea a vybra\u0165 elastick\u00e9 rie\u0161enie, u\u017e certifikovan\u00fa tak\u00fa \"virtu\u00e1lnu serverov\u0148u\".<\/p>\n<\/li>\n<\/ol>\n<p>V\u00e4\u010d\u0161ina IS, ktor\u00e9 spracov\u00e1vaj\u00fa PDn, vyu\u017e\u00edva tradi\u010dn\u00fd pr\u00edstup, ktor\u00fd, z poh\u013eadu podnikania, sa \u0165a\u017eko naz\u00fdva jednoduch\u00fdm a \u00faspe\u0161n\u00fdm. Pri v\u00fdbere tejto mo\u017enosti je potrebn\u00e9 pochopi\u0165, \u017ee technick\u00fd projekt bude zah\u0155\u0148a\u0165 popis hardv\u00e9ru, vr\u00e1tane softv\u00e9rovo-hardv\u00e9rov\u00fdch rie\u0161en\u00ed a platforiem. A to znamen\u00e1, \u017ee sa budete musie\u0165 stretn\u00fa\u0165 s nasleduj\u00facimi obtia\u017enos\u0165ami a obmedzeniami:<\/p>\n<ul>\n<li>\n<p>zlo\u017eitos\u0165 \u0161k\u00e1lovania;<\/p>\n<\/li>\n<li>\n<p>dlh\u00e1 doba realiz\u00e1cie projektu: je potrebn\u00e9 vybra\u0165, zak\u00fapi\u0165, nain\u0161talova\u0165, nastavi\u0165 a pop\u00edsa\u0165 syst\u00e9m;<\/p>\n<\/li>\n<li>\n<p>hromada \"papierovej\" pr\u00e1ce, pr\u00edkladom je vypracovanie \u00fapln\u00e9ho bal\u00edka dokument\u00e1cie pre cel\u00fd ISPDn.<\/p>\n<\/li>\n<\/ul>\n<p>Okrem toho obchod spravidla rozumie iba \"vrchn\u00e9mu\" levelu svojho IS - v pou\u017e\u00edvan\u00fdch biznis aplik\u00e1ci\u00e1ch. In\u00fdmi slovami, IT person\u00e1l je kvalifikovan\u00fd vo svojej \u00fazkej oblasti. Ch\u00fdba im pochopenie toho, ako funguj\u00fa v\u0161etky \"ni\u017e\u0161ie \u00farovne\": softv\u00e9rovo-hardv\u00e9rov\u00e9 prostriedky ochrany, syst\u00e9my ukladania, z\u00e1lohovanie a samozrejme, ako nastavi\u0165 prostriedky ochrany s dodr\u017ean\u00edm v\u0161etk\u00fdch po\u017eiadaviek a postavi\u0165 \"hardv\u00e9rov\u00fa\" \u010das\u0165 konfigur\u00e1cie. Je d\u00f4le\u017eit\u00e9 pochopi\u0165: toto je obrovsk\u00fd objem znalost\u00ed, ktor\u00e9 le\u017eia za hranicou podnikania klienta. Presne tu m\u00f4\u017ee by\u0165 u\u017eito\u010dn\u00e1 sk\u00fasenos\u0165 cloudov\u00e9ho poskytovate\u013ea, poskytuj\u00faceho certifikovan\u00fa \"virtu\u00e1lnu serverov\u0148u\".<\/p>\n<p>Cloud providers, on their part, have several advantages that can undoubtedly meet 99% of business needs in data protection.<\/p>\n<ul>\n<li>\n<p>capital expenditures are transformed into operational costs;<\/p>\n<\/li>\n<li>\n<p>the provider guarantees the necessary level of security and availability based on a proven standard solution;<\/p>\n<\/li>\n<li>\n<p>there is no need to maintain a team of specialists to ensure the operation of the ISPDn at the 'hardware' level;<\/p>\n<\/li>\n<li>\n<p>providers offer much more flexible and scalable solutions;<\/p>\n<\/li>\n<li>\n<p>the provider's specialists have all the necessary certifications;<\/p>\n<\/li>\n<li>\n<p>compliance is no lower than when building your own architecture, taking into account the requirements and recommendations of regulators.<\/p>\n<\/li>\n<\/ul>\n<p>The old myth that personal data cannot be placed in the cloud is still remarkably popular. It is only partly true: PDn cannot really be placed <em>in just any<\/em> cloud. It requires adherence to certain technical measures and the use of specific certified solutions. If the provider meets all legal requirements, the risks associated with PDn leakage are minimized. Many providers have separate infrastructure for processing PDn in accordance with 152-FZ. However, the choice of a provider must also be approached with knowledge of certain criteria, which we will definitely touch upon below.&nbsp;<\/p>\n<p>Clients often come to us with some concerns about placing PDn in the provider's cloud. Well, let's discuss them right away.<\/p>\n<ul>\n<li>\n<p>Data can be stolen during transmission or migration.<\/p>\n<\/li>\n<\/ul>\n<p>There is no need to worry about this\u2014the provider offers clients the creation of a secure data transmission channel based on certified solutions, enhanced authentication measures for contractors and employees. It's just a matter of choosing the right protection methods and implementing them in the course of client engagement.<\/p>\n<ul>\n<li>\n<p>Raiders will come and take away\/seal\/power off the server.<\/p>\n<\/li>\n<\/ul>\n<p>Je mo\u017en\u00e9 pochopi\u0165 z\u00e1kazn\u00edkov, ktor\u00ed maj\u00fa obavy, \u017ee ich obchodn\u00e9 procesy bud\u00fa naru\u0161en\u00e9 nedostato\u010dnou kontrolou nad infra\u0161trukt\u00farou. Zvy\u010dajne o tom prem\u00fd\u0161\u013eaj\u00fa klienti, ktor\u00fdch hardware sa predt\u00fdm nach\u00e1dzal v mal\u00fdch serverovn\u00e1ch, a nie v \u0161pecializovan\u00fdch d\u00e1tov\u00fdch centr\u00e1ch. V skuto\u010dnosti s\u00fa d\u00e1tov\u00e9 centr\u00e1 vybaven\u00e9 modern\u00fdmi prostriedkami fyzickej a informa\u010dnej ochrany. Ak\u00e9ko\u013evek oper\u00e1cie v takomto d\u00e1tovom centre s\u00fa takmer nemo\u017en\u00e9 vykona\u0165 bez dostato\u010dn\u00fdch d\u00f4vodov a dokument\u00e1cie, a tieto aktivity si vy\u017eaduj\u00fa dodr\u017eiavanie celej rady postupov. Okrem toho m\u00f4\u017ee \u201evytrhnutie\u201c v\u00e1\u0161ho servera z d\u00e1tov\u00e9ho centra ovplyvni\u0165 aj \u010fal\u0161\u00edch klientov poskytovate\u013ea, a to ur\u010dite nikto nechce. Navy\u0161e, nikto nebude m\u00f4c\u0165 uk\u00e1za\u0165 prstom na \u201ev\u00e1\u0161\u201c virtu\u00e1lny server, tak\u017ee ak by sa niekto chcel pok\u00fasi\u0165 ho ukradn\u00fa\u0165 alebo usporiada\u0165 raziu, najprv by sa musel stretn\u00fa\u0165 s mno\u017estvom byrokratick\u00fdch prek\u00e1\u017eok. Po\u010das tohto \u010dasu sa pravdepodobne stihnete nieko\u013ekokr\u00e1t presun\u00fa\u0165 na in\u00e9 miesto.<\/p>\n<ul>\n<li>\n<p>Hackeri prenikn\u00fa do cloudu a ukradn\u00fa \u00fadaje<\/p>\n<\/li>\n<\/ul>\n<p>Internet a tla\u010d s\u00fa pln\u00e9 titulkov o tom, ako sa \u010fal\u0161ie cloudov\u00e9 rie\u0161enie stalo obe\u0165ou kyberzlo\u010dincov a mili\u00f3ny z\u00e1znamov s osobn\u00fdmi \u00fadajmi unikli na internet. Vo v\u00e4\u010d\u0161ine pr\u00edpadov boli zranite\u013enosti odhalen\u00e9 nie u poskytovate\u013ea, ale v IT syst\u00e9moch obet\u00ed: slab\u00e9 alebo dokonca predvolen\u00e9 hesl\u00e1, \u201ed\u00edry\u201c v motoroch webov\u00fdch str\u00e1nok a datab\u00e1z, prost\u00fd nez\u00e1ujem podnikov pri v\u00fdbere ochrann\u00fdch prostriedkov a organizovan\u00ed pr\u00edstupu k \u00fadajom. V\u0161etky certifikovan\u00e9 rie\u0161enia s\u00fa testovan\u00e9 na zranite\u013enosti. Aj my pravidelne vykon\u00e1vame \u201ekontroln\u00e9\u201c pentesty a audity bezpe\u010dnosti, ako samostatne, tak aj prostredn\u00edctvom extern\u00fdch organiz\u00e1ci\u00ed. Pre poskytovate\u013ea je to ot\u00e1zka reput\u00e1cie a obchodu ako celku.<\/p>\n<ul>\n<li>\n<p>Poskytovate\u013e\/zamestnanci poskytovate\u013ea ukradn\u00fa osobn\u00e9 \u00fadaje za \u00fa\u010delom osobn\u00e9ho zisku<\/p>\n<\/li>\n<\/ul>\n<p>Je to dos\u0165 citliv\u00e1 t\u00e9ma. Rada spolo\u010dnost\u00ed v oblasti kybernetickej bezpe\u010dnosti des\u00ed svojich klientov a tvrd\u00ed, \u017ee \"vn\u00fatorn\u00ed zamestnanci s\u00fa nebezpe\u010dnej\u0161\u00ed ako extern\u00ed hackeri\". Mo\u017eno to plat\u00ed v niektor\u00fdch pr\u00edpadoch, ale obchod nemo\u017eno budova\u0165 bez d\u00f4very. Pravidelne sa objavuj\u00fa spr\u00e1vy o tom, \u017ee t\u00ed, ktor\u00ed pracuj\u00fa v organiz\u00e1ci\u00e1ch, unikaj\u00fa \u00fadaje svojich klientov \u00fato\u010dn\u00edkom, a vn\u00fatorn\u00e1 bezpe\u010dnos\u0165 je niekedy organizovan\u00e1 ove\u013ea hor\u0161ie ako vonkaj\u0161ia. Tu je d\u00f4le\u017eit\u00e9 pochopi\u0165, \u017ee ak\u00fdko\u013evek ve\u013ek\u00fd poskytovate\u013e sa extr\u00e9mne nezauj\u00edma o negat\u00edvne pr\u00edpady. Akcie zamestnancov poskytovate\u013ea s\u00fa presne regulovan\u00e9, \u00falohy a z\u00f3ny zodpovednosti s\u00fa rozdelen\u00e9. V\u0161etky obchodn\u00e9 procesy s\u00fa nastaven\u00e9 tak, aby sa pr\u00edpady \u00faniku d\u00e1t vyskytovali ve\u013emi zriedka a s\u00fa v\u017edy vidite\u013en\u00e9 intern\u00fdm slu\u017eb\u00e1m, preto by klienti nemali ma\u0165 obavy z tejto str\u00e1nky.<\/p>\n<ul>\n<li>\n<p>Plat\u00edte m\u00e1lo, preto\u017ee za slu\u017eby plat\u00edte \u00fadajmi svojho podnikania.<\/p>\n<\/li>\n<\/ul>\n<p>\u010eal\u0161\u00ed m\u00fdtus: klient, ktor\u00fd si prenaj\u00edma zabezpe\u010den\u00fa infra\u0161trukt\u00faru za rozumn\u00fa cenu, v skuto\u010dnosti za \u0148u plat\u00ed svojimi \u00fadajmi - takto \u010dasto uva\u017euj\u00fa odborn\u00edci, ktor\u00ed si radi pred span\u00edm pre\u010d\u00edtaj\u00fa p\u00e1r te\u00f3ri\u00ed sprisahania. Po prv\u00e9, mo\u017enos\u0165 vykon\u00e1va\u0165 ak\u00e9ko\u013evek oper\u00e1cie s va\u0161imi \u00fadajmi okrem t\u00fdch, ktor\u00e9 s\u00fa uveden\u00e9 v poveren\u00ed, je v podstate nulov\u00e1. Po druh\u00e9, rozumn\u00fd poskytovate\u013e si v\u00e1\u017ei vz\u0165ahy s vami a svoju poves\u0165 - okrem v\u00e1s m\u00e1 e\u0161te mno\u017estvo \u010fal\u0161\u00edch klientov. Sk\u00f4r je pravdepodobn\u00fd opak, pri ktorom poskytovate\u013e horlivo chr\u00e1ni \u00fadaje svojich klientov, na ktor\u00fdch okrem in\u00e9ho stoj\u00ed aj jeho podnikanie.<\/p>\n<h2>V\u00fdber cloudov\u00e9ho poskytovate\u013ea pre spracovanie osobn\u00fdch \u00fadajov<\/h2>\n<p>V s\u00fa\u010dasnosti trh pon\u00faka mno\u017estvo rie\u0161en\u00ed pre spolo\u010dnosti, ktor\u00e9 s\u00fa oper\u00e1tormi osobn\u00fdch \u00fadajov. Ni\u017e\u0161ie uv\u00e1dzame v\u0161eobecn\u00fd zoznam odpor\u00fa\u010dan\u00ed na v\u00fdber vhodn\u00e9ho poskytovate\u013ea.<\/p>\n<ul>\n<li>\n<p>Poskytovate\u013e by mal by\u0165 pripraven\u00fd uzavrie\u0165 ofici\u00e1lnu zmluvu, ktor\u00e1 popisuje povinnosti str\u00e1n, SLA a z\u00f3ny zodpovednosti z h\u013eadiska spracovania osobn\u00fdch \u00fadajov. V skuto\u010dnosti by medzi vami a poskytovate\u013eom, okrem zmluvy o slu\u017eb\u00e1ch, mala by\u0165 podp\u00edsan\u00e1 poverenie na spracovanie osobn\u00fdch \u00fadajov. V ka\u017edom pr\u00edpade stoj\u00ed za to ich d\u00f4kladne presk\u00fama\u0165. Je d\u00f4le\u017eit\u00e9 pochopi\u0165 rozdelenie z\u00f3n zodpovednosti medzi vami a poskytovate\u013eom.<\/p>\n<\/li>\n<li>\n<p>Upozornite, \u017ee segment mus\u00ed vyhovova\u0165 po\u017eiadavk\u00e1m, a teda ma\u0165 osved\u010denie, ktor\u00e9 uv\u00e1dza \u00farove\u0148 zabezpe\u010denia nie ni\u017e\u0161iu, ako je potrebn\u00e9 pre va\u0161u IS. Niekedy poskytovatelia zverej\u0148uj\u00fa iba prv\u00fa stranu osved\u010denia, z ktorej toho ve\u013ea nevypl\u00fdva, alebo odkazuj\u00fa na audit alebo prechod kontroln\u00fdmi proced\u00farami, nezverej\u0148uj\u00fac samotn\u00e9 osved\u010denie (\"bol chlapec?\"). Stoj\u00ed za to ho po\u017eadova\u0165 \u2013 je to verejn\u00fd dokument, v ktorom je uveden\u00e9, kto vykonal certifik\u00e1ciu, platnos\u0165, umiestnenie cloudu a podobne.<\/p>\n<\/li>\n<li>\n<p>Poskytovate\u013e by mal poskytova\u0165 inform\u00e1cie o tom, kde sa nach\u00e1dzaj\u00fa jeho are\u00e1ly (objekty ochrany), aby ste mohli kontrolova\u0165 umiestnenie svojich \u00fadajov. Pripom\u00edname, \u017ee po\u010diato\u010dn\u00fd zber PZ mus\u00ed prebieha\u0165 na \u00fazem\u00ed SR, a preto by ste mali v zmluve\/osved\u010den\u00ed vidie\u0165 adresy DC.<\/p>\n<\/li>\n<li>\n<p>Poskytovate\u013e by mal pou\u017e\u00edva\u0165 certifikovan\u00e9 SZI a SKZI. Samozrejme, v\u00e4\u010d\u0161ina poskytovate\u013eov netaj\u00ed pou\u017e\u00edvan\u00e9 technick\u00e9 prostriedky ochrany a architekt\u00faru rie\u0161en\u00ed. Ale vy ako klient o tom nem\u00f4\u017eete nevedie\u0165. Tak napr\u00edklad, pre vzdialen\u00e9 pripojenie k syst\u00e9mu spr\u00e1vy (port\u00e1lu spr\u00e1vy) je potrebn\u00e9 pou\u017e\u00edva\u0165 prostriedky ochrany. Poskytovate\u013e toto po\u017eiadavku nem\u00f4\u017ee ob\u00eds\u0165 a poskytne v\u00e1m (alebo si vy\u017eaduje, aby ste pou\u017e\u00edvali) certifikovan\u00e9 rie\u0161enia. Vyberte si na testovanie zdroje a ihne\u010f pochop\u00edte, ako a \u010do funguje.&nbsp;<\/p>\n<\/li>\n<li>\n<p>Je mimoriadne \u017eiaduce, aby cloudov\u00fd poskytovate\u013e poskytoval \u010fal\u0161ie slu\u017eby v oblasti IB. M\u00f4\u017eu to by\u0165 r\u00f4zne slu\u017eby: ochrana pred DDoS \u00fatokmi a WAF, antiv\u00edrusov\u00e1 slu\u017eba alebo pieskovisko a podobne. To v\u0161etko v\u00e1m umo\u017en\u00ed z\u00edska\u0165 ochranu ako slu\u017ebu, neodv\u00e1dza\u0165 pozornos\u0165 na budovanie syst\u00e9mov ochrany, ale venova\u0165 sa biznis aplik\u00e1ci\u00e1m.<\/p>\n<\/li>\n<li>\n<p>Poskytovate\u013e mus\u00ed by\u0165 licencovan\u00fd FTC a FSB. Zvy\u010dajne s\u00fa tieto inform\u00e1cie zverejnen\u00e9 priamo na webovej str\u00e1nke. Ur\u010dite si vy\u017eiadate tieto dokumenty a skontrolujte, \u010di s\u00fa spr\u00e1vne uveden\u00e9 adresy poskytovania slu\u017eieb, n\u00e1zov spolo\u010dnosti poskytovate\u013ea a podobne.&nbsp;<\/p>\n<\/li>\n<\/ul>\n<p>Zhr\u0148me to. Pren\u00e1jom infra\u0161trukt\u00fary v\u00e1m umo\u017en\u00ed vzda\u0165 sa CAPEX a ponecha\u0165 si v svojej zodpovednosti iba svoje biznis aplik\u00e1cie a samotn\u00e9 \u00fadaje, zatia\u013e \u010do \u0165a\u017ek\u00e9 bremeno certifik\u00e1cie \u201ehardv\u00e9ru\u201c a softv\u00e9rohardv\u00e9rov\u00fdch prostriedkov prenesiete na poskytovate\u013ea.<\/p>\n<h3>Ako sme prech\u00e1dzali certifik\u00e1ciou<\/h3>\n<p>Ned\u00e1vno sme \u00faspe\u0161ne pre\u0161li prehodnoten\u00edm infra\u0161trukt\u00fary \u201eZabezpe\u010den\u00e9 cloud FZ-152\u201c v s\u00falade s po\u017eiadavkami na pr\u00e1cu s osobn\u00fdmi \u00fadajmi. Pr\u00e1ce vykon\u00e1val \u201eN\u00e1rodn\u00fd atesta\u010dn\u00fd centr\u00e1\u201c.<\/p>\n<p>V s\u00fa\u010dasnosti je \u201eZabezpe\u010den\u00e9 cloud FZ-152\u201c certifikovan\u00e9 na umiestnenie informa\u010dn\u00fdch syst\u00e9mov zapojen\u00fdch do spracovania, uchov\u00e1vania alebo prenosu osobn\u00fdch \u00fadajov (ISPD) pod\u013ea po\u017eiadaviek \u00farovne UZ-3.<\/p>\n<p>Postup certifik\u00e1cie predpoklad\u00e1 pos\u00fadenie zhodnosti infra\u0161trukt\u00fary cloudov\u00e9ho poskytovate\u013ea s \u00farov\u0148ou ochrany. Samotn\u00fd poskytovate\u013e pon\u00faka slu\u017ebu IaaS a nie je prev\u00e1dzkovate\u013eom osobn\u00fdch \u00fadajov. Proces zah\u0155\u0148a hodnotenie ako organiza\u010dn\u00fdch (dokument\u00e1cia, pr\u00edkazy at\u010f.), tak aj technick\u00fdch opatren\u00ed (nastavenie ochrann\u00fdch prostriedkov a pod.).<\/p>\n<p>Nie je mo\u017en\u00e9 ho pova\u017eova\u0165 za trivi\u00e1lny. Napriek tomu, \u017ee GOST pre programy a metodiky vykon\u00e1vania certifika\u010dn\u00fdch \u010dinnost\u00ed existuje u\u017e od roku 2013, pr\u00edsne programy pre cloudov\u00e9 objekty zatia\u013e neexistuj\u00fa. Atesta\u010dn\u00e9 centr\u00e1 vyv\u00edjaj\u00fa tieto programy na z\u00e1klade vlastnej odbornej expert\u00edzy. S pr\u00edchodom nov\u00fdch technol\u00f3gi\u00ed sa programy komplikuj\u00fa a modernizuj\u00fa, a preto mus\u00ed atest\u00e1tor ma\u0165 sk\u00fasenosti s cloudov\u00fdmi rie\u0161eniami a ch\u00e1pa\u0165 ich \u0161pecifik\u00e1.<\/p>\n<p>V na\u0161om pr\u00edpade sa objekt ochrany sklad\u00e1 z dvoch lokal\u00edt.<\/p>\n<ul>\n<li>\n<p>Pr\u00edslu\u0161n\u00e9 cloudov\u00e9 zdroje (servery, \u00falo\u017en\u00e9 syst\u00e9my, sie\u0165ov\u00e1 infra\u0161trukt\u00fara, ochrann\u00e9 prostriedky at\u010f.) s\u00fa umiestnen\u00e9 priamo v DCI. Bezpochyby je tak\u00fd virtu\u00e1lny DCI pripojen\u00fd k verejn\u00fdm sie\u0165am, pri\u010dom musia by\u0165 splnen\u00e9 ur\u010dit\u00e9 po\u017eiadavky na sie\u0165ov\u00fa ochranu, napr\u00edklad pou\u017e\u00edvanie certifikovan\u00fdch firewallov.<\/p>\n<\/li>\n<li>\n<p>Druh\u00e1 \u010das\u0165 objektu \u2014 prostriedky spr\u00e1vy cloudu. S\u00fa to pracovn\u00e9 stanice (ARM administr\u00e1tora), z ktor\u00fdch sa vykon\u00e1va spr\u00e1va zabezpe\u010den\u00e9ho segmentu.<\/p>\n<\/li>\n<\/ul>\n<p>Lokalit s\u00fa prepojen\u00e9 cez <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"131\">VPN<\/a>-kan\u00e1l postaven\u00fd na SKZI.<\/p>\n<p>Preto\u017ee technol\u00f3gie virtualiz\u00e1cie vytv\u00e1raj\u00fa predpoklady na vznik hrozieb, pou\u017e\u00edvame aj dodato\u010dn\u00e9 certifikovan\u00e9 ochrann\u00e9 prostriedky.<\/p>\n<p><img decoding=\"async\" alt=\"IaaS 152-FZ: tak\u017ee, potrebujete bezpe\u010dnos\u0165\" src=\"\/wp-content\/uploads\/2020\/09\/611ca4c92615fffb675864b72dcaa2f8.jpg\" style=\"display:block;margin: 0 auto;\" \/>\u0160truktur\u00e1lna sch\u00e9ma \u201eo\u010dami atest\u00e1tora\u201c<\/p>\n<p>Ak klient potrebuje certifik\u00e1ciu jeho IS PDN, po pren\u00e1jme IaaS mu zostane len vykona\u0165 hodnotenie informa\u010dn\u00e9ho syst\u00e9mu nad \u00farov\u0148ou virtu\u00e1lneho d\u00e1tov\u00e9ho centra. Tento proces predpoklad\u00e1 kontrolu infra\u0161trukt\u00fary a pou\u017eit\u00fdch softv\u00e9rov\u00fdch rie\u0161en\u00ed. Ke\u010f\u017ee v r\u00e1mci v\u0161etk\u00fdch infra\u0161trukt\u00farnych ot\u00e1zok m\u00f4\u017eete odkazova\u0165 na certifik\u00e1t poskytovate\u013ea, zost\u00e1va v\u00e1m len opravi\u0165 softv\u00e9r.<\/p>\n<p><img decoding=\"async\" alt=\"IaaS 152-FZ: tak\u017ee, potrebujete bezpe\u010dnos\u0165\" src=\"\/wp-content\/uploads\/2020\/09\/4b0f5c72f8460c2a81068887efc8c9b1.jpg\" style=\"display:block;margin: 0 auto;\" \/>Rozdelenie na \u00farovni abstrakcie<\/p>\n<p>Na z\u00e1ver uv\u00e1dzame mal\u00fd kontroln\u00fd zoznam pre spolo\u010dnosti, ktor\u00e9 u\u017e pracuj\u00fa s PDN alebo len pl\u00e1nuj\u00fa. Tak\u017ee, ako spracov\u00e1va\u0165 a nesp\u00e1li\u0165 sa.<\/p>\n<ol>\n<li>\n<p>Na vykonanie auditu a v\u00fdvoja modelov hrozieb a naru\u0161ovate\u013eov si pozvite sk\u00fasen\u00e9ho konzultanta z radu certifika\u010dn\u00fdch laborat\u00f3ri\u00ed, ktor\u00ed v\u00e1m pom\u00f4\u017eu vypracova\u0165 potrebn\u00e9 dokumenty a posun\u00fa v\u00e1s u\u017e do f\u00e1zy technick\u00fdch rie\u0161en\u00ed.<\/p>\n<\/li>\n<li>\n<p>Pri v\u00fdbere cloudov\u00e9ho poskytovate\u013ea dbajte na existenciu certifik\u00e1tu. Dobre je, ak spolo\u010dnos\u0165 verejne umiestnila osved\u010denie priamo na svojich str\u00e1nkach. Poskytovate\u013e by mal by\u0165 licencovan\u00fdm subjektom FSTEK a FSB a pon\u00fakan\u00e1 slu\u017eba by mala by\u0165 certifikovan\u00e1.<\/p>\n<\/li>\n<li>\n<p>Uistite sa, \u017ee bude uzavret\u00e1 ofici\u00e1lna zmluva a podp\u00edsan\u00e9 poverenie na spracovanie PDN. Na jeho z\u00e1klade m\u00f4\u017eete vykona\u0165 ako kontrolu zhody, tak aj certifik\u00e1ciu IS PDN. Ak sa v\u00e1m tieto pr\u00e1ce v r\u00e1mci technick\u00e9ho projektu a vytvorenia projektovej dokument\u00e1cie zdaj\u00fa za\u0165a\u017euj\u00face, stoj\u00ed za to obr\u00e1ti\u0165 sa na extern\u00e9 poradensk\u00e9 spolo\u010dnosti z radov certifika\u010dn\u00fdch laborat\u00f3ri\u00ed.<\/p>\n<\/li>\n<\/ol>\n<p>Ak v\u00e1s zauj\u00edmaj\u00fa ot\u00e1zky spracovania PDN, 18. septembra, tento piatok, budeme radi, ak v\u00e1s uvid\u00edme na webin\u00e1ri. <noindex><a rel=\"nofollow\" href=\"https:\/\/event.it-grad.ru\/certification?utm_source=habr&amp;utm_medium=article&amp;utm_campaign=anons18092020\"><u>\u201eOsobitosti budovania certifikovan\u00fdch cloudov\u201c<\/u><\/a><\/noindex>.<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/it-grad\/blog\/519276\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044b \u043d\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u043b\u0438 \u043c\u0438\u0444\u044b \u0438 \u043b\u0435\u0433\u0435\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 152-\u0424\u0417, \u0447\u0442\u043e-\u0442\u043e \u0432\u0441\u0435\u0433\u0434\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u043a\u0430\u0434\u0440\u043e\u043c. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0445\u043e\u0442\u0438\u043c \u043e\u0431\u0441\u0443\u0434\u0438\u0442\u044c \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0435 \u043d\u044e\u0430\u043d\u0441\u044b, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0442\u0430\u043a \u0438 \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f: \u0442\u043e\u043d\u043a\u043e\u0441\u0442\u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u041f\u0414\u043d \u043f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c \u2014 \u043a\u043e\u0433\u0434\u0430 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435, \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0435\u0441\u044f \u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438, \u0434\u0430\u0436\u0435 \u043d\u0435 \u0437\u043d\u0430\u044f \u043e\u0431 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94451,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94450","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044b \u043d\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u043b\u0438 \u043c\u0438\u0444\u044b \u0438 \u043b\u0435\u0433\u0435\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47IaaS 152-\u0424\u0417: \u0438\u0442\u0430\u043a, \u0432\u0430\u043c \u043d\u0443\u0436\u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044b \u043d\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u043b\u0438 \u043c\u0438\u0444\u044b \u0438 \u043b\u0435\u0433\u0435\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-17T05:42:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-17T05:42:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 IaaS 152-FZ: tak\u017ee, potrebujete bezpe\u010dnos\u0165 | ProHoster","description":"Ko\u013eko m\u00fdtov a legiend o tom u\u017e bolo rozobrat\u00fdch.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47IaaS 152-\u0424\u0417: \u0438\u0442\u0430\u043a, \u0432\u0430\u043c \u043d\u0443\u0436\u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044b \u043d\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u043b\u0438 \u043c\u0438\u0444\u044b \u0438 \u043b\u0435\u0433\u0435\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-17T05:42:44+00:00","article:modified_time":"2020-09-17T05:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94450","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:26:28","updated":"2026-02-04 14:42:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/94450","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=94450"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/94450\/revisions"}],"predecessor-version":[{"id":156760,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/94450\/revisions\/156760"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/94451"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=94450"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=94450"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=94450"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}