IaaS 152-FZ: ngakho-ke, udinga ukuphepha

IaaS 152-FZ: ngakho-ke, udinga ukuphepha

Noma ngabe uzixazulula kangakanani izinganekwane nezinganekwane ezizungeza ukuthobela i-152-FZ, okuthile kuhlala kusele ngemuva. Namuhla sifuna ukuxoxa ngamanye ama-nuances angabonakali njalo izinkampani ezinkulu namabhizinisi amancane kakhulu angase ahlangane nazo:

  • ubuqili bokuhlukaniswa kwe-PD ngezigaba - lapho isitolo esincane se-inthanethi siqoqa idatha ehlobene nesigaba esikhethekile ngaphandle kokwazi ngakho;

  • lapho ungagcina khona ama-backups we-PD eqoqiwe futhi wenze imisebenzi kuwo;

  • imuphi umehluko phakathi kwesitifiketi nesiphetho sokuthobela, imaphi amadokhumenti okufanele uwacele kumhlinzeki, nezinto ezinjalo.

Ekugcineni, sizokwabelana nawe ngolwazi lwethu lokuphasa isitifiketi. Hamba!

Isazi esihlokweni sanamuhla sizoba U-Alexey Afanasyev, INGABE uchwepheshe wabahlinzeki bamafu IT-GRAD kanye ne-#CloudMTS (ingxenye yeqembu le-MTS).

Ubuqili bokuhlukanisa

Sivamise ukuhlangana nesifiso sekhasimende sokuthi ngokushesha, ngaphandle kokuhlolwa kwe-IS, sinqume izinga elidingekayo lokuphepha le-ISPD. Ezinye izinto eziku-inthanethi kulesi sihloko zinikeza umbono ongamanga wokuthi lokhu kuwumsebenzi olula futhi kunzima kakhulu ukwenza iphutha.

Ukuze unqume i-KM, kuyadingeka ukuqonda ukuthi iyiphi idatha ezoqoqwa futhi icutshungulwe yi-IS yeklayenti. Kwesinye isikhathi kungaba nzima ukucacisa ngokucacile izidingo zokuvikela kanye nesigaba sedatha yomuntu siqu esetshenziswa yibhizinisi. Izinhlobo ezifanayo zedatha yomuntu siqu zingahlolwa futhi zihlukaniswe ngezindlela ezihluke ngokuphelele. Ngakho-ke, kwezinye izimo, umbono webhizinisi ungase uhluke embonweni womcwaningi wamabhuku noma ngisho nomhloli. Ake sibheke izibonelo ezimbalwa.

Ipaki yezimoto. Kungase kubonakale kuwuhlobo lwebhizinisi oluvamile. Izimoto eziningi zezimoto sezisebenze amashumi eminyaka, futhi abanikazi bazo baqasha osomabhizinisi ngabanye kanye nabantu ngabanye. Njengomthetho, idatha yesisebenzi iwela ngaphansi kwezidingo ze-UZ-4. Kodwa-ke, ukusebenza nabashayeli, akudingekile kuphela ukuqoqa idatha yomuntu siqu, kodwa futhi ukwenza ukulawula kwezokwelapha endaweni yemikhumbi yezimoto ngaphambi kokuhamba, futhi ulwazi oluqoqwe ohlelweni luwela ngokushesha esigabeni idatha yezokwelapha - futhi lena idatha yomuntu siqu yesigaba esikhethekile. Ngaphezu kwalokho, umkhumbi ungacela izitifiketi, ezizogcinwa efayeleni lomshayeli. Ukuskena kwesitifiketi esinjalo ngefomu le-elekthronikhi - idatha yezempilo, idatha yomuntu siqu yesigaba esikhethekile. Lokhu kusho ukuthi i-UZ-4 ayisanele; kudingeka okungenani i-UZ-3.

Isitolo esiku-inthanethi. Kubukeka sengathi amagama, ama-imeyili nezinombolo zocingo eziqoqiwe zingena esigabeni somphakathi. Kodwa-ke, uma amakhasimende akho ekhombisa okuncamelayo kokudla, okufana ne-halal noma i-kosher, ulwazi olunjalo lungase lubhekwe njengenhlangano yezenkolo noma idatha yenkolelo. Ngakho-ke, lapho uhlola noma wenza eminye imisebenzi yokulawula, umhloli angase ahlukanise idatha oyiqoqayo njengesigaba esikhethekile sedatha yomuntu siqu. Manje, uma isitolo se-inthanethi siqoqe ulwazi mayelana nokuthi umthengi waso uthanda inyama noma inhlanzi, idatha ingase ifakwe kusigaba njengenye idatha yomuntu siqu. Nokho, kuthiwani ngabadla imifino? Phela, lokhu kungabuye kuthiwe yizinkolelo zefilosofi, nazo eziyingxenye yesigaba esikhethekile. Kodwa ngakolunye uhlangothi, lokhu kungase kumane kube isimo sengqondo somuntu oye wakhipha inyama ekudleni kwakhe. Maye, alukho uphawu oluchaza ngokucacile isigaba se-PD ezimweni ezinjalo "ezicashile".

I-ejensi yokukhangisa Isebenzisa isevisi yamafu yaseNtshonalanga, icubungula idatha etholakala esidlangalaleni yamakhasimende ayo - amagama aphelele, amakheli e-imeyili nezinombolo zocingo. Le datha yomuntu siqu, vele, ihlobene nedatha yomuntu siqu. Umbuzo uphakama: ingabe kusemthethweni ukwenza ukucubungula okunjalo? Kungenzeka yini ukuhambisa idatha enjalo ngaphandle kokwenza umuntu ngaphandle kweRussian Federation, isibonelo, ukugcina ama-backups kwamanye amafu angaphandle? Yebo ungakwazi. I-Ejensi inelungelo lokugcina le datha ngaphandle kweRussia, noma kunjalo, ukuqoqwa kokuqala, ngokomthetho wethu, kufanele kwenziwe endaweni yeRussian Federation. Uma wenza ikhophi yasenqolobaneni yolwazi olunjalo, ubale izibalo ezithile ngokusekelwe kulo, wenza ucwaningo noma wenze eminye imisebenzi ngalo - konke lokhu kungenziwa ngezinsiza zaseNtshonalanga. Iphuzu elibalulekile ngokombono wezomthetho yilapho idatha yomuntu siqu iqoqwa khona. Ngakho-ke kubalulekile ukuthi ungaphambanisi ukuqoqwa kokuqala nokucubungula.

Ngokulandelayo kulezi zibonelo ezimfushane, ukusebenza ngedatha yomuntu siqu akulula ngaso sonke isikhathi futhi kulula. Akufanele wazi kuphela ukuthi usebenza nabo, kodwa futhi ukwazi ukuhlukanisa kahle, uqonde ukuthi i-IP isebenza kanjani ukuze unqume kahle izinga lokuphepha elidingekayo. Kwezinye izimo, kungase kuphakame umbuzo wokuthi ingakanani i-PD inhlangano edinga ukuyisebenzisa ngempela. Kungenzeka yini ukwenqaba idatha “engathi sína” noma nje engadingekile? Ukwengeza, umlawuli uncoma ukuthi idatha yomuntu siqu ibe yeyakho lapho kungenzeka khona. 

Njengakulezi zibonelo ezingenhla, ngezinye izikhathi ungase uhlangabezane neqiniso lokuthi iziphathimandla zokuhlola zihumusha idatha yomuntu siqu eqoqiwe ngendlela ehlukile kancane kunalokho ozihlole wena ngokwakho.

Yebo, ungaqasha umcwaningi mabhuku noma umdidiyeli wesistimu njengomsizi, kodwa ingabe “umsizi” uzoba nesibopho ngezinqumo ezikhethiwe uma kwenzeka kucwaningwa? Kuyaqapheleka ukuthi umthwalo wemfanelo uhlala ulele kumnikazi we-ISPD - opharetha wedatha yomuntu siqu. Yingakho, lapho inkampani yenza umsebenzi onjalo, kubalulekile ukuphendukela kubadlali abakhulu emakethe yezinsizakalo ezinjalo, isibonelo, izinkampani eziqhuba umsebenzi wokuqinisekisa. Izinkampani eziqinisekisayo zinolwazi olunzulu ekwenzeni umsebenzi onjalo.

Izinketho zokwakha i-ISPD

Ukwakhiwa kwe-ISPD akuyona nje into yobuchwepheshe, kodwa futhi ikakhulukazi indaba yezomthetho. I-CIO noma umqondisi wezokuphepha kufanele ngaso sonke isikhathi axhumane nomeluleki wezomthetho. Njengoba inkampani ihlale inochwepheshe onephrofayili oyidingayo, kufanelekile ukubheka kubabonisi bama-auditor-consultants. Amaphuzu amaningi ashelelayo angase angabonakali nhlobo.

Ukubonisana kuzokuvumela ukuthi unqume ukuthi iyiphi idatha yomuntu siqu obhekene nayo nokuthi idinga liphi izinga lokuvikela. Ngakho-ke, uzothola umbono we-IP odinga ukwakhiwa noma wengezwe ngezinyathelo zokuphepha nezokusebenza.

Ngokuvamile ukukhetha kwenkampani kuphakathi kwezinketho ezimbili:

  1. Yakha i-IS ehambisanayo kweyakho ihadiwe nezixazululo zesoftware, ngokunokwenzeka egumbini lakho leseva.

  2. Xhumana nomhlinzeki wefu bese ukhetha isixazululo esinwebekayo, "igumbi leseva elibonakalayo" elivele liqinisekisiwe.

Iningi lezinhlelo zolwazi ezicubungula idatha yomuntu siqu zisebenzisa indlela yendabuko, leyo, ngokombono webhizinisi, ngeke kuthiwe ilula futhi iyimpumelelo. Lapho ukhetha le nketho, kuyadingeka ukuqonda ukuthi ukwakheka kwezobuchwepheshe kuzobandakanya incazelo yemishini, kufaka phakathi izixazululo zesoftware nehardware namapulatifomu. Lokhu kusho ukuthi kuzodingeka ubhekane nobunzima nemikhawulo elandelayo:

  • ubunzima bokukala;

  • isikhathi eside sokuqaliswa kwephrojekthi: kuyadingeka ukukhetha, ukuthenga, ukufaka, ukulungisa nokuchaza uhlelo;

  • umsebenzi omningi "wephepha", njengesibonelo - ukuthuthukiswa kwephakheji eliphelele lemibhalo ye-ISPD yonke.

Ngaphezu kwalokho, ibhizinisi, njengomthetho, liqonda kuphela izinga "eliphezulu" le-IP yalo - izinhlelo zebhizinisi elizisebenzisayo. Ngamanye amazwi, abasebenzi be-IT banamakhono endaweni yabo ethile. Akukho ukuqonda ukuthi wonke "amazinga aphansi" asebenza kanjani: ukuvikelwa kwesofthiwe ne-hardware, izinhlelo zokulondoloza, ikhophi yasenqolobaneni futhi, yebo, indlela yokumisa amathuluzi okuvikela ngokuhambisana nazo zonke izidingo, ukwakha ingxenye "ye-hardware" yokucushwa. Kubalulekile ukuqonda: lolu ungqimba olukhulu lolwazi olungaphandle kwebhizinisi leklayenti. Kulapho ulwazi lomhlinzeki wamafu ohlinzeka "ngegumbi leseva elibonakalayo" eliqinisekisiwe lingaba usizo.

Ngokulandelayo, abahlinzeki bamafu banenani lezinzuzo, ngaphandle kwehaba, ezingamboza u-99% wezidingo zebhizinisi emkhakheni wokuvikelwa kwedatha yomuntu siqu:

  • izindleko ezinkulu ziguqulwa zibe yizindleko zokusebenza;

  • umhlinzeki, ngakolunye uhlangothi, uqinisekisa ukuhlinzekwa kwezinga elidingekayo lokuphepha nokutholakala okusekelwe kusixazululo esijwayelekile esifakazelwe;

  • asikho isidingo sokugcina abasebenzi bochwepheshe abazoqinisekisa ukusebenza kwe-ISPD ezingeni le-hardware;

  • abahlinzeki banikeza izixazululo eziningi eziguquguqukayo nezinwebekayo;

  • ochwepheshe bomhlinzeki banazo zonke izitifiketi ezidingekayo;

  • ukuthobela akukho ngaphansi kunalapho wakha isakhiwo sakho siqu, ucabangela izidingo nezincomo zabalawuli.

Inganekwane endala yokuthi idatha yomuntu siqu ayikwazi ukugcinwa efwini isadume kakhulu. Kuyiqiniso ngokwengxenye kuphela: I-PD ngempela ayikwazi ukuthunyelwa kweyokuqala etholakalayo ifu. Ukuhambisana nezinyathelo ezithile zobuchwepheshe kanye nokusetshenziswa kwezixazululo ezithile eziqinisekisiwe kuyadingeka. Uma umhlinzeki ethobela zonke izimfuneko zomthetho, ubungozi obuhlobene nokuvuza kwedatha yomuntu siqu buyancipha. Abahlinzeki abaningi banengqalasizinda ehlukile yokucubungula idatha yomuntu siqu ngokuhambisana ne-152-FZ. Kodwa-ke, ukukhetha umphakeli kufanele futhi kukhulunywe ngolwazi lwemibandela ethile; ngokuqinisekile sizoyithinta ngezansi. 

Amaklayenti avame ukuza kithi nokukhathazeka okuthile mayelana nokubekwa kwedatha yomuntu siqu efwini lomhlinzeki. Hhayi-ke, ake sixoxe ngazo ngokushesha.

  • Idatha ingase yebiwe ngesikhathi sokudluliselwa noma ukufuduka

Asikho isidingo sokwesaba lokhu - umhlinzeki unikeza iklayenti ukudalwa kwesiteshi sokudlulisa idatha esivikelekile esakhelwe phezu kwezixazululo eziqinisekisiwe, izinyathelo zokuqinisekisa ezithuthukisiwe zosonkontileka nabasebenzi. Okusele nje ukukhetha izindlela zokuvikela ezifanele futhi uzisebenzise njengengxenye yomsebenzi wakho neklayenti.

  • Bonisa imaski izofika futhi isuse/ivale/inqamule amandla kuseva

Kuyaqondakala kumakhasimende asaba ukuthi izinqubo zebhizinisi lawo zizophazamiseka ngenxa yokulawulwa okunganele kwengqalasizinda. Njengomthetho, lawo maklayenti i-hardware yawo ngaphambili yayitholakala emakamelweni amaseva amancane kunezikhungo zedatha ezikhethekile acabanga ngalokhu. Eqinisweni, izikhungo zedatha zihlonyiswe ngezindlela zesimanje zombili zokuvikela ngokomzimba nolwazi. Cishe akunakwenzeka ukwenza noma yimiphi imisebenzi esikhungweni sedatha esinjalo ngaphandle kwezizathu ezanele namaphepha, futhi imisebenzi enjalo idinga ukulandelwa kwezinqubo ezimbalwa. Ngaphezu kwalokho, "ukudonsa" iseva yakho kusuka esikhungweni sedatha kungase kuthinte amanye amaklayenti omhlinzeki, futhi lokhu akudingekile nakanjani kunoma ubani. Ngaphezu kwalokho, akekho ozokwazi ukukhomba ngomunwe ngokuqondile iseva "yakho" ebonakalayo, ngakho-ke uma othile efuna ukuyeba noma enze umbukiso wemaski, kuzodingeka aqale abhekane nokulibaziseka okuningi kwe-bureaucratic. Ngalesi sikhathi, cishe uzoba nesikhathi sokuthuthela kwenye isayithi izikhathi ezimbalwa.

  • Izigebengu ze-inthanethi zizogebenga ifu futhi zintshontshe idatha

I-inthanethi kanye nokuphrinta kugcwele izihloko zezindaba mayelana nokuthi elinye ifu liphinde laba isisulu sezigebengu ze-inthanethi, futhi izigidi zamarekhodi edatha yomuntu siqu ziputshuke ku-inthanethi. Ezikhathini eziningi, ubungozi abutholakalanga ngasohlangothini lomhlinzeki nhlobo, kodwa ezinhlelweni zolwazi zabahlukunyezwayo: amagama ayimfihlo abuthakathaka noma amisiwe, “izimbobo” ezinjinini zesizindalwazi kanye nesizindalwazi, kanye nokunganaki kwebhizinisi okungavumelekile lapho kukhethwa izinyathelo zokuphepha kanye ukuhlela izinqubo zokufinyelela idatha. Zonke izixazululo eziqinisekisiwe zihlolelwa ubungozi. Siphinde futhi senze “ukulawula” amaphenethi kanye nokuhlolwa kwezokuphepha, kokubili ngokuzimela nangezinhlangano zangaphandle. Kumhlinzeki, lokhu kuyindaba yesithunzi nebhizinisi ngokujwayelekile.

  • Umhlinzeki/izisebenzi zomhlinzeki zizontshontsha idatha yomuntu siqu ukuze kuzuze yena

Lesi yisikhathi esibucayi kakhulu. Izinkampani eziningi ezivela emhlabeni wokuvikela ulwazi “ziyathusa” amakhasimende azo futhi ziphikelela ngokuthi “abasebenzi bangaphakathi bayingozi kakhulu kunabaduni bangaphandle.” Lokhu kungase kube yiqiniso kwezinye izimo, kodwa ibhizinisi alikwazi ukwakhiwa ngaphandle kokwethenjwa. Ngezikhathi ezithile, izindaba zikhanya ukuthi izisebenzi zenhlangano uqobo ziputshuza idatha yekhasimende kubahlaseli, futhi ukuphepha kwangaphakathi ngezinye izikhathi kuhlelwa kubi kakhulu kunokuphepha kwangaphandle. Kubalulekile ukuqonda lapha ukuthi noma yimuphi umhlinzeki omkhulu akanantshisekelo kakhulu ezimweni ezimbi. Izenzo zabasebenzi bomhlinzeki zilawulwa kahle, izindima kanye nezindawo zokuzibophezela zihlukaniswa. Zonke izinqubo zebhizinisi zakhiwe ngendlela yokuthi amacala okuvuza kwedatha mancane kakhulu amathuba okuba abonakale ezinsizakalweni zangaphakathi, ngakho amaklayenti akufanele esabe izinkinga ezivela kulolu hlangothi.

  • Ukhokha kancane ngoba ukhokhela izinsizakalo ngedatha yebhizinisi lakho.

Enye inganekwane: iklayenti eliqashisa ingqalasizinda evikelekile ngentengo enethezekile empeleni liyikhokhela ngedatha yalo - lokhu kuvame ukucatshangwa ochwepheshe abangenandaba nokufunda imibono embalwa yozungu ngaphambi kokuyolala. Okokuqala, ithuba lokwenza noma yimiphi imisebenzi ngedatha yakho ngaphandle kwaleyo eshiwo ngohlelo empeleni inguziro. Okwesibili, umhlinzeki owanele ubheka ubuhlobo nawe nesithunzi sakhe - ngaphandle kwakho, unamakhasimende amaningi. Isimo esiphambene singenzeka kakhulu, lapho umhlinzeki ezovikela ngentshiseko idatha yamakhasimende akhe, lapho ibhizinisi lakhe lilele khona.

Ukukhetha umhlinzeki wamafu we-ISPD

Namuhla, imakethe inikeza izixazululo eziningi zezinkampani ezisebenza nge-PD. Ngezansi uhlu olujwayelekile lwezincomo zokukhetha okulungile.

  • Umhlinzeki kufanele alungele ukungena esivumelwaneni esisemthethweni esichaza izibopho zamaqembu, ama-SLA kanye nezindawo zokuzibophezela kukhiye wokucubungula idatha yomuntu siqu. Eqinisweni, phakathi kwakho nomhlinzeki, ngaphezu kwesivumelwano sesevisi, i-oda lokucubungula i-PD kufanele lisayinwe. Kunoma yikuphi, kuyafaneleka ukuzifunda ngokucophelela. Kubalulekile ukuqonda ukuhlukaniswa kwezibopho phakathi kwakho nomhlinzeki.

  • Sicela uqaphele ukuthi ingxenye kufanele ihlangabezane nezidingo, okusho ukuthi kufanele ibe nesitifiketi esibonisa izinga lokuphepha elingekho ngaphansi kwalelo elidingwa i-IP yakho. Kwenzeka ukuthi abahlinzeki bashicilele kuphela ikhasi lokuqala lesitifiketi, lapho okuncane kucace khona, noma babhekisele ekucwaningeni kwamabhuku noma ezinqubweni zokuthobelana ngaphandle kokushicilela isitifiketi ngokwaso (“ingabe kwakukhona umfana?”). Kufanelekile ukuyibuza - lena idokhumenti yomphakathi ekhombisa ukuthi ubani ophethe isitifiketi, isikhathi sokuqinisekisa, indawo yamafu, njll.

  • Umhlinzeki kufanele anikeze ulwazi mayelana nokuthi amasayithi akhe (izinto ezivikelwe) atholakala kuphi ukuze ukwazi ukulawula ukubekwa kwedatha yakho. Ake sikukhumbuze ukuthi iqoqo lokuqala ledatha yomuntu siqu kufanele lenziwe endaweni yeRussian Federation; ngakho-ke, kuhle ukubona amakheli esikhungo sedatha kunkontileka/isitifiketi.

  • Umhlinzeki kufanele asebenzise izinhlelo zokuvikela ulwazi eziqinisekisiwe kanye nezinhlelo zokuvikela ulwazi. Kunjalo, abahlinzeki abaningi abakhangisi izinyathelo zokuphepha zobuchwepheshe kanye nezixazululo zezakhiwo abazisebenzisayo. Kodwa wena, njengeklayenti, awukwazi ukuzibamba wazi ngakho. Isibonelo, ukuze uxhume ukude ohlelweni lokuphatha (ingosi yokuphatha), kuyadingeka ukusebenzisa izinyathelo zokuphepha. Umhlinzeki ngeke akwazi ukweqa lesi sidingo futhi uzokunikeza (noma adinge ukuthi usebenzise) izixazululo eziqinisekisiwe. Thatha izinsiza zokuhlola futhi uzoqonda ngokushesha ukuthi kusebenza kanjani nokuthi yini esebenzayo. 

  • Kufiseleka kakhulu kumhlinzeki wamafu ukuthi anikeze izinsizakalo ezengeziwe emkhakheni wokuphepha kolwazi. Lezi zingaba izinsizakalo ezihlukahlukene: ukuvikelwa ekuhlaselweni kwe-DDoS ne-WAF, isevisi yokulwa namagciwane noma i-sandbox, njll. Konke lokhu kuzokuvumela ukuthi uthole ukuvikeleka njengesevisi, ukuze ungaphazanyiswa izinhlelo zokuvikela izakhiwo, kodwa usebenze ezicelweni zebhizinisi.

  • Umhlinzeki kufanele abe umnikazi welayisensi ye-FSTEC kanye ne-FSB. Njengomthetho, ulwazi olunjalo luthunyelwa ngqo kuwebhusayithi. Qiniseka ukuthi ucela lawa madokhumenti futhi uhlole ukuthi amakheli okunikeza izinsizakalo, igama lenkampani ehlinzeka ngezinsizakalo, njll. alungile yini. 

Ake sifingqe. Ingqalasizinda yokuqasha izokuvumela ukuthi ulahle i-CAPEX futhi ugcine kuphela izinhlelo zakho zokusebenza zebhizinisi kanye nedatha ngokwayo endaweni yakho yesibopho, futhi udlulisele umthwalo osindayo wokuqinisekisa ihadiwe nesoftware nehadiwe kumnikezeli.

Siphumelele kanjani isitifiketi

Muva nje, siphumelele ukugunyazwa kabusha kwengqalasizinda ye-"Secure Cloud FZ-152" ukuze ihambisane nezidingo zokusebenza ngedatha yomuntu siqu. Umsebenzi wenziwa yiNational Certification Center.

Njengamanje, i-"FZ-152 Secure Cloud" iqinisekisiwe ngokusingatha izinhlelo zolwazi ezihilelekile ekucubunguleni, ekugcinweni noma ekudlulisweni kwedatha yomuntu siqu (ISPDn) ngokuhambisana nezidingo zeleveli UZ-3.

Inqubo yesitifiketi ibandakanya ukuhlola ukuthobelana kwengqalasizinda yomhlinzeki wamafu nezinga lokuvikela. Umhlinzeki ngokwakhe uhlinzeka ngesevisi ye-IaaS futhi akayena u-opharetha wedatha yomuntu siqu. Inqubo ibandakanya ukuhlolwa kwakho kokubili kwenhlangano (imibhalo, imiyalo, njll.) kanye nezinyathelo zobuchwepheshe (ukusetha impahla yokuzivikela, njll.).

Angeke kuthiwe yinto encane. Naphezu kokuthi i-GOST ezinhlelweni nezindlela zokwenza imisebenzi yesitifiketi yavela ngo-2013, izinhlelo eziqinile zezinto zefu azikho. Izikhungo zokunikeza izitifiketi zithuthukisa lezi zinhlelo ngokusekelwe kulwazi lwazo. Ngokufika kobuchwepheshe obusha, izinhlelo ziba nzima kakhulu futhi zenziwa zibe yisimanjemanje; ngakho-ke, oqinisekisayo kufanele abe nolwazi lokusebenza nezixazululo zefu futhi aqonde imininingwane ethile.

Esimweni sethu, into evikelwe iqukethe izindawo ezimbili.

  • Izinsiza zamafu (amaseva, izinhlelo zokugcina, ingqalasizinda yenethiwekhi, amathuluzi okuphepha, njll.) zitholakala ngokuqondile esikhungweni sedatha. Yiqiniso, isikhungo sedatha esinjalo sixhunywe kumanethiwekhi omphakathi, futhi ngokufanele, izidingo ezithile ze-firewall kufanele zihlangatshezwe, isibonelo, ukusetshenziswa kwezindonga zomlilo eziqinisekisiwe.

  • Ingxenye yesibili yento ngamathuluzi okuphatha amafu. Lezi yizindawo zokusebenza (iziteshi zomphathi) lapho ingxenye evikelwe ilawulwa khona.

Izindawo zixhumana ngesiteshi se-VPN esakhelwe ku-CIPF.

Njengoba ubuchwepheshe be-virtualization budala imibandela yokuvela kwezinsongo, siphinde sisebenzisa amathuluzi okuvikela aqinisekisiwe.

IaaS 152-FZ: ngakho-ke, udinga ukuphephaVimba umdwebo "ngamehlo omhloli"

Uma iklayenti lidinga isitifiketi se-ISPD yalo, ngemva kokuqasha i-IaaS, kuzodingeka kuphela lihlole isistimu yolwazi ngaphezu kwezinga lesikhungo sedatha ebonakalayo. Le nqubo ibandakanya ukuhlola ingqalasizinda kanye nesofthiwe esetshenziswa kuyo. Njengoba ungabhekisela kusitifiketi somhlinzeki kuzo zonke izindaba zengqalasizinda, okumele ukwenze ukusebenzisana nesofthiwe.

IaaS 152-FZ: ngakho-ke, udinga ukuphephaUkwehlukana ezingeni le-abstraction

Sengiphetha, nalu uhlu lokuhlola oluncane lwezinkampani esezivele zisebenza ngedatha yomuntu siqu noma ezihlelayo nje. Ngakho, indlela yokusingatha ngaphandle kokushiswa.

  1. Ukuze uhlole futhi uthuthukise amamodeli ezinsongo kanye nabahlaseli, mema umxhumanisi onolwazi phakathi kwamalabhorethri anikeza izitifiketi ozosiza ukuthuthukisa imibhalo edingekayo futhi akulethe esigabeni sezixazululo zobuchwepheshe.

  2. Lapho ukhetha umhlinzeki wamafu, qaphela ukuba khona kwesitifiketi. Kungaba kuhle uma inkampani ikuthumele esidlangalaleni ngokuqondile kuwebhusayithi. Umhlinzeki kufanele abe umnikazi welayisensi ye-FSTEC kanye ne-FSB, futhi isevisi ayinikezayo kufanele iqinisekiswe.

  3. Qiniseka ukuthi unesivumelwano esisemthethweni kanye nomyalelo osayiniwe wokucubungula idatha yomuntu siqu. Ngokusekelwe kulokhu, uzokwazi ukwenza kokubili ukuhlola ukuthobela kanye nesitifiketi se-ISPD. Uma lo msebenzi esigabeni sephrojekthi yezobuchwepheshe kanye nokudalwa komklamo kanye nemibhalo yobuchwepheshe kubonakala kuwumthwalo kuwe, kufanele uxhumane nezinkampani zokubonisana zezinkampani zangaphandle. kusuka phakathi kwama-laboratories ezitifiketi.

Uma izindaba zokucutshungulwa kwedatha yomuntu siqu zibalulekile kuwe, ngoSepthemba 18, kulo Lwesihlanu, sizojabula ukukubona kuwebhu "Izici zokwakha amafu aqinisekisiwe".

Source: www.habr.com

Engeza amazwana