FSTEC was lowered by a class of some information systems for health facilities

FSTEC of Russia recognized reasonable the ReignVox companies of development of models of threats offered by experts for medical institution with reduction of the class of the information systems processing data on health of patients and approved the selected approach.

The ReignVox company developed models of security risks for each of the information systems selected in an information structure of medical institution processing personal data. As the press service of the company reported, in two cases from four models of threats were developed with reduction of the class of information systems from K1 to K2, and this approach got approval of FSTEC of Russia.

According to the assistant department head of technical protection of ReignVox company Anton Kardanov, the situation of reduction of the class of an information system of medical institution approved with the regulator is unprecedented for today. "Earlier any information systems of medical institutions processing personal data about health automatically belonged to the first class. In this case we managed to prove redundancy and excessiveness of the measures of protection recommended to FSTEC of Russia for information systems of class K1", - Kardanov emphasized.

According to experts of ReignVox company, the first successful experience of reduction of the class of information systems in medical institution approved by the regulator demonstrates achievement of balance between respect for the principle of "reasonable sufficiency" at security of personal data processing and need to conform to the existing requirements of the Russian legislation in this sphere.