Federal Law-152 "Pakudzivirira Kwemunhu Data" inoshanda kune ese aripo masangano: vanhu uye masangano emutemo, masangano ehurumende yemubatanidzwa uye hurumende dzenzvimbo. Muchokwadi, mutemo uyu unoshanda kune chero sangano rinogadzira ruzivo uye ruzivo rwemunhu rwevagari veRussian Federation, zvisinei nechimiro chemuridzi uye saizi yesangano.
Dzimwe nguva sangano, risingazvitarisire pacharo, rinogona kuwana pekutanga masisitimu eruzivo rwemunhu wega data (PD). Semuyenzaniso, kambani inoonekwa semushandi wedata remunhu kana webhusaiti yayo iine mafomu emhinduro, kunyoreswa, mvumo uye mamwe mafomu ekuunganidza data ayo nyaya inogona kuzivikanwa nayo.
Kudzora uye kutarisisa maererano nekutevedzera zvinodiwa nemutemo wemubatanidzwa "PaPersonal Data" kunoitwa nevanodzora:
- Roskomnadzor maererano nekuchengetedzwa kwekodzero dzezvidzidzo zvemunhu;
- FSB yeRussia maererano nekutevedzera zvinodiwa mumunda wecryptography;
- FSTEC yeRussia maererano nekutevedzera zvinodiwa zvekuchengetedza ruzivo kubva kune kusingatenderwe kuwana uye kuvuza kuburikidza nehunyanzvi nzira.
Sezvo Federal Law "On Personal Data" iriyo chete hwaro hwerutsigiro rwemutemo kuchengetedzwa kwedata remunhu, zvayaida zvakazotsanangurwa muzviito zveHurumende yeRussian Federation uye Ministry of Communications, uye mamwe magwaro ekutonga uye maitiro e. regulators.
Zviremera zveFederal zvinoronga zviitiko mumunda wekugadzirisa data pachako
- Roskomnadzor (Federal Service for Supervision of Communications and Mass Communications) - inoshandisa kutonga uye kutarisa pamusoro pekutevedzwa kwePD kugadzirisa nezvinodiwa zvemutemo.
- FSTEC yeRussia (Federal Service yeTechnical uye Export Control) - inogadza nzira uye nzira dzekudzivirira ruzivo uchishandisa tekinoroji nzira.
- FSB yeRussia (Federal Security Service yeRussian Federation) - inogadza nzira uye nzira dzekudzivirira ruzivo mukati memasimba ayo (nzvimbo yekushandiswa kwecryptographic nzira dzekudzivirira ruzivo)
Sangano rega rega rinogadzirisa data remunhu rinotarisana nedambudziko rekuunza masisitimu eruzivo mukutevedzera zvinodiwa nemutemo. Kudzivirirwa kwedata remunhu ndechimwe chezvinhu zvinonyanya kudzvanya, kwete muRussia chete, asiwo kune dzimwe nyika.
Mhando dzedata remunhu
Zvinoenderana neFederal Law No. 152, data yemunhu chero ruzivo rwune chekuita nemunhu akazivikanwa kana akatemerwa pahwaro hweruzivo rwakadaro (chinyorwa che data rega). Semuenzaniso: zita rakazara, zuva nenzvimbo yekuzvarwa, kero, mhuri, magariro, chimiro chepfuma, dzidzo, nezvimwe.
Yega data yakakamurwa mumapoka akati wandei:
Special
Mashoko emunhu ane chekuita nedzinza, nyika, maonero ezvematongerwo enyika, zvechitendero kana uzivi, mamiriro ehutano, hupenyu hwepedyo
Biometric
PD, iyo inoratidzira hunhu hwehupenyu uye hwehupenyu hwemunhu, pahwaro hwekuti kuzivikanwa kwake kunogona kusimbiswa uye iyo inoshandiswa nemushandisi kuratidza kuzivikanwa kwechinyorwa che data remunhu.
Zvimwe
PD ine chekuita nemunhu akananga kana zvisina kunanga anozivikanwa kana anozivikanwa munhu uye asiri kuwira mumapoka ari pamusoro.
Ruzhinji zviripo
PD yakawanikwa kubva kunowanikwa pachena kune iyo data yakadhindwa nemvumo yakanyorwa yenyaya yedata remunhu
Kugadziriswa kwedata remunhu chero chiito (kushanda) kana seti yezviito nedata remunhu uchishandisa kana pasina otomatiki maturusi, anosanganisira:
- muunganidzwa,
- kurekodha,
- systematization,
- kuunganidza,
- kuchengetedza,
- kujekesa (update, shanduko),
- kubviswa,
- kushandiswa,
- kutumira (kugovera, kupa, kuwana),
- depersonalization,
- kuvhara,
- kubviswa,
- kuparadzwa kwedata remunhu.
Mutoro wekutyorwa
Maererano neChitsauko 24 cheFederal Law No. 152, vanhu vane mhosva yekutyora mutemo maererano nemutemo weRussian Federation.
Kana uchitarisa kambani, vatongi vanotungamirirwa neFederal Law-152 uye nhamba yemitemo. Ongororo yacho inogona kuve yakarongwa kana kusarongerwa - zvichibva pane chokwadi chekutyorwa, pamwe nekutarisa zvakambopihwa mirairo yekuzvibvisa.
Vanhu vanotyora zvinodiwa zvekuchengetedzwa kwedata remunhu vanogona kutarisana kwete kwete yehurumende uye kurangwa, asiwo manejimendi uye kunyangwe mhosva.
Nzira yekutevedzera sei zvinodiwa zveFederal Law-152?
Saka, kambani kana sangano rinogadzira dhata remunhu kana rumwe ruzivo rwakadzama rinofanira kuchengetedza ruzivo urwu zvinoenderana nemutemo. Izvi hazvidi chete hunyanzvi hwakakomba, ruzivo uye ruzivo, asi zvakare zvakabatana nematambudziko ehunyanzvi uye mutengo wakakura.
Zvinoenderana netsanangudzo yepamutemo yakabvumidzwa neFSTEC, "... Kuchengetedzwa kwedata remunhu imamiriro ekuchengetedza data rako pachako, rinoratidzwa nekugona kwevashandisi, nzira dzehunyanzvi uye matekinoroji eruzivo kuti ive nechokwadi chekuvanzika, kuvimbika uye kuwanikwa kwedata rako pachako kana. yakagadziridzwa mumasisitimu eruzivo rwemunhu...β
Kuti uzadzise izvo zvesangano, zvemutemo uye zvehunyanzvi zvinodiwa zveFederal Law 152, iwe pachako, haufanirwe kudzidza kwete chete mutemo pachawo, asiwo mitemo yayo, uye kuona chaizvo matanho anofanirwa kutorwa. Outsourcing nyanzvi dzinogona kudzidza maitiro ekugadzirisa data remunhu mukambani, kudhirowa magwaro anodiwa, kuita matanho ekuchengetedza, nezvimwe.
Iyo yakazara ruzivo yekuchengetedza sisitimu inosanganisira:
- Midziyo Yekudzivirira Yekupinda (IDS).
- Firewall (FW).
- Dziviriro kubva kune malware.
- Sisitimu yekutarisa uye kurekodha zviitiko zvekuchengetedza.
- Sisitimu yekriptographic kuchengetedza kwenzira dzekutaurirana (encryption).
- Nzira dzekuchengetedza iyo chaiyo nharaunda, sisitimu yekudzivirira kubva kune isina kutenderwa kupinda (ATP), kuzivikanwa uye kuwana kutonga.
- Chengetedzo yekuongorora/kukanganisa yekuona sisitimu, nezvimwe.
Uye zvakare, kuchengetedzwa kweruzivo rwakakwana kunosanganisira kwete tekinoroji chete, asiwo matanho ehurongwa.
Cloud FZ-152: maitiro ekushandisa
Huwandu hwevashandisi vekuRussia vanopa masevhisi ekupihwa kwegore zvivakwa zvekubata masisitimu eruzivo zvinoenderana nezvinodiwa nemutemo wemubatanidzwa maererano nedata remunhu. Kana masisitimu emutengi achibatwa mugore, mupi anotora nyaya dzakawanda dzekuchengetedza ruzivo, kusanganisira izvo zvine chekuita nekuchengetedzwa kwedata remunhu. Kana uchitamira kune gore, ichadzivirira iyo IT masisitimu, uye izvi zvinobvisa mamwe emabasa kubva kumutengi. Semuenzaniso, mupi anozadzisa zvinodiwa zveFederal Law 152 maererano nekuchengetedzwa kwenzvimbo yekuona.
Vanopa vanogonawo kupa vatengi rubatsiro rwehunyanzvi mukugadzirisa dambudziko rekuchengetedza data: kuona iyo inodiwa nhanho yekuchengetedza uye, maererano neizvi, ichipa sarudzo yekushandisa; kugadzira zvinyorwa kuti zvienderane nezvinodiwa nemutemo weRussian Federation.
Gore rakachengeteka richabatsira kukwidziridza mutengo wesangano nekudzikisa mitengo yekugadzira nekuchengetedza IT masisitimu uye yemukati yekuchengetedza ruzivo system. Kazhinji, nyanzvi dzakakwanisa dzinopa hutsigiro hwakakwana hwehunyanzvi uye rutsigiro, kusanganisira kubvunza uye kugadzira pasuru yemagwaro ekupihwa zvitupa nevakuru vane hutongi, uye chikuva chekupa masevhisi chinosangana nehunyanzvi hwekuita zviyero uye chinosangana nezvinodiwa nesangano. Vatengi vanogona kutora mukana wemasevhisi kugadzirira zvinyorwa zvinodiwa uye kuchengetedza ISPD padanho rekushandisa uye rekushandisa system.
Njodzi uye njodzi manejimendi maitiro, kuferefetwa kwezviitiko, mukati nekunze kuchengetedzwa kwekuongorora, pamwe nekutarisa nguva dzose uye kuyedzwa kwetiweki, masisitimu uye maitiro ekuchengetedza ruzivo anopihwa zvakare. Nyanzvi dzakakodzera dzinopa XNUMX/XNUMX IT tsigiro yezvivakwa.
Kutorwa pamwechete, matanho aya anovimbisa kuteedzera mitemo yemubatanidzwa maererano nekuchengetedzwa kwedata remunhu.
Certified platform
IBS DataFort inopa sevhisi yakadai yakavakirwa pa . Zvese zvehunyanzvi zvikamu, manejimendi uye virtualization maturusi epuratifomu inoteedzera zvakajairwa uye zvinodiwa zveFederal Law-152.
Kuvaka kweiyo IBS DataFort yakachengeteka gore.
Iyi puratifomu inopa chengetedzo yakavimbiswa yeISPD (kusvika padanho rekutanga rekuchengetedza rinosanganisirwa), GIS (kusvika uye kusanganisira kirasi yekutanga yekuchengetedza) uye chengetedzo yekuchengetedza data muTier III data center. Iyi puratifomu inoshandisa mafirewall ane certified, intrusion yekuona uye kudzivirira maturusi (IDS/IPS), encryption of communication channels (GOST VPN), anti-virus dziviriro, kudzivirira kubva kusingabvumirwe kupinda, kuchengetedzwa kweiyo virtualization nharaunda, pamwe nenjodzi yekuongorora maturusi.
iri zvakare mhinduro yakakodzera kune avo vane zvinodiwa zvakanyanya zvekuvanzika uye kuchengetedzwa kwedata, vanoda kusimbisa mukurumbira wavo webhizinesi kana kuwana mukana wakadai wekukwikwidza seyero yakasimbiswa yekuchengetedzwa kweruzivo.
Nzira ye "kufamba" kune gore rakadaro? βKutama kusina musonoβ kunobvira here? Quite. Semuenzaniso, IBS DataFort inoendesa zvakachengeteka ISPD kune gore rayo rakachengeteka, ichideredza nguva yekudzikira uye kukanganiswa kwemaitiro ebhizinesi rekambani (kusanganisira kubva kune dzimwe nyika).
Kuunza iyo IT masisitimu mukutevedzera Federal Law-152
Maitiro ekuunza mutengi IT zvivakwa mukuteerana nezvinodiwa zveFederal Law-152 inotanga nekuongorora uye ongororo yeyezvino nhanho yekuchengetedza.
Kuongororwa kwemutengi weIT yezvivakwa kunosanganisira kuongororwa kwekugadzirisa uye kuchengetedzwa kwedata remunhu uye kuongororwa kweruzivo rwemutengi. Chirevo chekuongorora chinodhirowa netsanangudzo yakadzama yePD yekugadzirisa maitiro kubva pahunyanzvi hwekuona.
Iro basa rinosanganisirawo kutyisidzira uye vapambi uye kudhirowa rondedzero yekuona huwandu hwechengetedzo yeISPD. Zvichienderana nemhedzisiro yekuongororwa, yakavanzika tekinoroji yekumisikidza yeiyo ISPD kuchengetedza system inodhirowa uye inotsanangura zvinodikanwa zveiyo yakagadzirirwa sisitimu.
Seti yemitemo, mirairo, mirau uye mamwe magwaro ekuchengetedzwa kwedata remunhu ari kugadzirwa. Panguva imwecheteyo, nyanzvi dzinoedza kukwidziridza mutengo wemutengi wekuita matanho ekuchengetedza.
IBS DataFort inopa masevhisi ekugadzirira zvinyorwa uye kudzivirira ISPD kutevedzera mutemo wemubatanidzwa pamusoro pekuchengetedzwa kwedata rako uye inogona kubatsira mukugadzirira nekupasa certification (ISPD, GIS, AS).
Certification inoitwa nevanozvimiririra vaongorori vane rezinesi neFSTEC uye FSB yeRussia. Kupfuura chitupa chakadaro kunosimbisa kuchengetedzwa kwakavimbika kweiyo data yevadyidzani vekambani uye vatengi kubva kutyisidzira kwekunze, uye kuteedzera kwakazara nezvinodiwa zvekutonga. Zvakakosha kuti vatengi vagamuchire nyore kwe "one-stop shopu": zvese zvinopihwa nekambani imwe - IBS DataFort.
Kune iyo yemunhu data opareta, izvi zvinoreva kugadzirira kuongororwa neRoskomnadzor, FSTEC neFSB, kubvisa njodzi yekuvharisa zviwanikwa, uye kusavapo kwezvichemo uye zvirango kubva kumutongi.
Iyi sevhisi yakakosha kune akawanda mapoka evatengi muhurumende uye chikamu chemakambani uye anogona kunge ari kudiwa nevashandisi ve data avo vanoda kuunza zviitiko zvavo mukuteerana nemutemo. Kuisa iyo IP muchikamu chakavharwa chezvivakwa zveanopa, zvakasimbiswa zvinoenderana neyese inodiwa zviyero uye zvinodiwa, inosunungura mutengi kubva pakudiwa kwekuzvimiririra kuronga basa rese.
Source: www.habr.com