Linxdatacenter provided compliance of HubEx and myQRcards services to requirements of FZ-152 of the Russian Federation

2019: Ensuring compliance of HubEx and myQRcards services to requirements for personal data protection

On November 12, 2019 the company Linxdatacenter reported that it provided compliance of services HubEx and myQRcards, developed by the company "Smart Service", to requirements on to personal data protection. The functionality of both solutions includes storage also data processing of the users getting under classification of personal data (PDN) according to FZ-152 (a full name, phone, the address e-mail , etc.).

For ensuring the processes required by the law during the work with personal data Linxdatacenter provided to Smart Service service of IaaS (Infrastruktura-kak-usluga) based on the cloud platform in St. Petersburg. The team of experts on cloud services and information security executed the project on transfer of server capacities of a working environment of HubEx and myQRcards on the platform Linxdatacenter in the selected protected virtual infrastructure certified according to requirements of FZ-152 for processing and storage of PDN.

As noted in Linxdatacenter, the information system for work with PDN should meet three main requirements:

• access to servers of storage and data processing should be made via the VPN channel with enciphering according to GOST;
• servers of storage and data processing should be under permanent monitoring by antivirus protection on lack of vulnerabilities;
• DWH it has to be located in the isolated networks.

The project started in June, 2019 and consisted of four main stages:

• preparation,
• migration,
• testing and check in actual practice,
• and also inclusion of monitoring systems and access restriction.

In view of the fact that works affected a working environment of HubEx and myQRcards and directly affected availability of services to users, transfer of server capacities was carried out to the approved time windows and was broken into several stages, each of which came to the end with complete testing of network availability and functionality of systems. According to the results of the project the selected subnet was organized, migration of two clusters consisting of virtual machines is carried out (Failover a cluster of databases, Service Fabric a cluster of applications) and also settings of the systems of protection and data encryption are made.

Through joint efforts Smart Service was succeeded to make significant changes to the existing server framework that allowed to increase reliability and security of storage of PDN and practically to exclude risks of unauthorized access to data of users. The specified changes provided observance of FZ-152 that is confirmed also by issue of the conclusion about compliance of infrastructure to requirements to storage of PDN.

"By a key factor when choosing Linxdatacenter as the contractor capability of the company began to provide the service in placement of server capacities in the separate zones meeting requirements of FZ-152 supported with the conclusion about compliance. Receiving end-to-end service "infrastructure for IT solutions plus compliance to requirements of FZ-152" almost on a turn-key basis helped us not only to solve purely infrastructure moments, to receive SLA and other components of the IT project at service provider, but also to guarantee legal purity of service", Maxim Grishkov, the technical director of the company noted Smart Service