DataSpace Cloud

Main article: What is IaaS

2024: Compliance with the requirements of the Law "On Personal Data" No. 152-FZ

According to the results of certification tests, cloudy the DataSpace Cloud infrastructure complies with the requirements of the Federal Law "About Personal Data" No. 152-FZ for the protection of personal data security systems according to the 3rd level of security. The company DataSpace (DataSpace Partners) announced this on January 18, 2024.

STEP LOGIC has completed the DataSpace Cloud qualification project.

At the first stage, the specialists of the system integrator conducted a survey of the customer's infrastructure, as a result of which they developed and implemented a set of measures and means of protection that allow achieving compliance with regulatory requirements for information protection. DataSpace and STEP LOGIC have been successfully interacting in the field of information security for several years, so at this stage it was necessary to implement only the requirements for creating a cryptographic protection subsystem for information channels for administrators to access internal and cloud resources. The current legislation obliges personal data operators to use GOST encryption when transmitting them over communication channels that go beyond the controlled zone, therefore, to protect the access of administrators, a certified TLS crypto gateway was introduced.

After finalizing the information protection system, STEP LOGIC specialists conducted certification tests of the DataSpace Cloud cloud infrastructure in real operating conditions. Experts assessed the compliance with the requirements for information protection, both documentation (technical passport of the object of informatization, model of threats to information security, documents containing the results of analysis of vulnerabilities of the protection system), and organizational and technical measures taken at the object. In addition, the level of knowledge and skills of the customer's employees responsible for ensuring the protection of personal data was tested.

According to the results of the tests, DataSpace Cloud received a certificate of compliance with the requirements for the protection of personal data.

DataSpace Cloud is a robust cloud infrastructure. Information security and customer data protection issues are among the top priorities for us. Certification of DataSpace Cloud confirmed the high level of protection of the cloud infrastructure and its full compliance with the requirements of Russian legislation in the field of personal data protection, - commented Viktor Vinogradov, information security manager at DataSpace.

Cloud provider customers need to remember that there are information protection measures that always remain on their side. That is, when placing ISDS in the infrastructure of a certified cloud provider, it is also necessary to think over the system of their protection and develop appropriate measures and documents, "said Alena Ignatieva, head of consulting and information security audit at STEP LOGIC.