Creation of a data protection system for the VK Cloud Solutions data center (hereinafter referred to as the data center) in order to ensure that the data center infrastructure meets the requirements for the protection of information not...
Creation of a data protection system for the VK Cloud Solutions data center (hereinafter referred to as the data center) in order to ensure that the data center infrastructure meets the requirements for the protection of information not constituting state secrets contained in state information systems and to confirm the compliance of the data center infrastructure with the specified requirements.Collapse
Lots:
...Expand
Lot No. 1
Creation of a data protection system for the VK Cloud Solutions data center (hereinafter referred to as the data center) in order to ensure that the data center infrastructure meets the requirements for the protection of information that is not a state secret contained in state information systems and confirms the compliance of the data center infrastructure with the specified requirements (Preparing a data center for GIS certification K-1 and certification)Collapse
Comments: 1.1 Purpose of service
The creation of an information protection system for the VK Cloud Solutions data center infrastructure (hereinafter referred to as the DPC) in accordance with the data protection requirements in accordance with the legislation of the Russian Federation is carried out in order to ensure the DPC compliance with the Requirements for the protection of information that is not a state secret contained in state information systems approved by by order of the FSTEC of Russia dated February 11, 2013 No. 17, as well as the implementation of the necessary information protection measures aimed at excluding:
- illegal access, copying, provision or distribution of information (ensuring the confidentiality of information);
- illegal destruction or modification of information (ensuring the integrity of information);
- illegal blocking of information (ensuring the availability of information).
1.2 Service delivery objectives
In order to ensure the protection of information contained in the data center, when creating an information security system, the following tasks should be solved:
- formation of requirements for the protection of information contained in the data center;
- assessment of the security architecture of the information system in terms of protecting the virtualization environment;
- development of a data center information protection system;
- implementation of a data center information protection system;
- attestation tests for data center information security requirements.
1.3 Requirements for the Contractor
The contractor must have the following valid licenses during the entire period of service provision:
- license of the FSTEC of Russia for technical protection of confidential information, services provided for in subparagraphs b), d), e), f) of paragraph 4 of the Regulation on licensing activities for the technical protection of confidential information, approved by Government Decree No. 79 of February 3, 2012 " On licensing activities for the technical protection of confidential information ";
- license of the FSB of Russia for the development, production, distribution of encryption (cryptographic) means, information and telecommunication systems protected using encryption (cryptographic) means, provision of services in the field of information encryption, maintenance of encryption (cryptographic) means, IP and telecommunication systems, protected using encryption (cryptographic) means;
- mandatory signing of a non-disclosure agreement before receiving the full TK;
Venue of bidding:
This call for bids is held in electronic form on the e-marketplace of B2B-Center group (www.b2b-center.ru). Bids shall be submitted in the form of e-document.
