CorpSoft24 provided secure cloud resources for the "First Electronic Recipe"

2021: Providing a secure cloud

On October 20, 2021, CorpSoft24 announced that it had provided access to a secure cloud using the IaaS model on VMware platform to First Electronic Recipe.

"First Electronic Recipe" is a federal service designed to access prescriptions for drugs issued in the form of an electronic document. According to the national project "Healthcare," all subjects of the Russian Federation should switch to the system of electronic prescriptions until 2023.

The electronic prescription is written using regional IIAs (Medical Information Systems) and signed by the electronic signature of the doctor, and then when the medicine is released at the pharmacy - by the electronic signature of the pharmacist.

At the start of the project, the developers faced tasks that needed to be solved in a short time: obtaining the status of "Other Information System," connecting to the Uniform State Health Information System (Unified State Information System in the Field of Health) and regional IIAs (through a secure ViPNet - network).

Therefore, in addition to the requirements for the protection of personal data, it was necessary to fulfill the requirements of Government Decree No. 447 of 12.04.2018 and Order of the Ministry of Health No. 911n of 24.12.2018.

Meeting the requirements of the current legislation in the field of information security in the field of healthcare requires significant costs for both equipment and software, as well as for highly qualified personnel. In addition, IB integration projects often have long implementation dates. Therefore, we chose cloud services that meet the requirements of legislation in the field of information protection, "explained Dmitry Burmistrov, head of the development and testing department of First Electronic Recipe.

As a result of the connection cloud CorpSoft24 to the company, "First Electronic Recipe" received a reliable, fault-tolerant computing infrastructure, the necessary certified security tools and, cryptoprotection information as well as their technical support. As part of the GOST service, a VPN secure transmission network based on was deployed by CorpSoft24 specialists specifically for the project data. cryptoslips ViPNet Coordinator

The data center CorpSoft24 certified according to the information security requirements for the state information systems (GIS) of the first security class (K1) and personal data information systems (IDIS) with the provision of the first level of security (UZ-1).

We take an integrated approach to information security. Based on our cloud, customers can quickly deploy an information system that meets all the necessary requirements for the IS, conduct its certification and obtain all the necessary documentation, including a threat model and local regulations. As of October 2021, the CorpSoft24 cloud will provide resources for the operation of the electronic recipe service in about 10 regions of the Russian Federation. But when scaling the service to other regions, it will be possible to quickly increase the necessary computing capacity, "said Demyan Ramensky, development director of CorpSoft24.