Decision of the State Technical Commission of Russia..
Decision of the State Technical Commission of Russia.
At a meeting of the State Technical Commission under the President of the Russian Federation, the issue of «On the protection of information when Russia enters the international information system Internet» was considered.
At the meeting it was noted that Russia's integration into the international community necessitates its active entry into the international information space through public information systems.
In this regard, the State Technical Commission of Russia draws attention to the following circumstances:
- Currently, there are no decisions developed at the state level that determine the organization of interaction in these systems. This situation does not allow for the proper monitoring of the security status of information systems connected to international information systems, including the Internet, and, as a consequence, leads to an increase in the possibility of implementing security threats to these systems, as well as their information resources.
- The main threats to the information resources of the Russian Federation include unauthorized access and software and mathematical impacts of users of international (global) information systems, including the Internet, on internal networks of Russia in which information containing confidential data circulates.
- Official information of the state authorities of the Russian Federation and its subjects, institutions, enterprises, organizations and software for processing it using computing equipment connected to international information systems require protection.
- Ensuring reliable protection of information of government bodies when Russia enters international information systems dictates the need for the fastest possible development of coordinated comprehensive solutions that would cover a wide range of interrelated problems of a legal, organizational, financial — economic, scientific — technical and technological nature.
In order to improve the protection of information resources of the Russian Federation and its subjects when entering the international information system Internet, the State Technical Commission of Russia recommended:
1. As initial measures to protect information, government bodies — users of international information systems, including the Internet:
- develop plans of measures to protect restricted access information in information networks;
- develop and implement in practice instructions containing the basic rules for ensuring information security when connecting to international information networks.
2. Until technical and organizational issues are resolved that guarantee the reliability of protection of automated systems of government bodies, computer equipment that processes information constituting a state secret, personal data of citizens of the Russian Federation and that are used in control systems of environmentally hazardous industries, transport, communications, energy, etc., do not connect these technical means to international information systems, including the Internet.
3. When using public information networks, pay special attention to:
- the level of confidentiality and value of information processed on the computing equipment of subscribers to public information networks;
- the need to use firewalls and other information security tools certified in accordance with information security requirements when interacting with public information networks.
4. Based on the analysis of the certification materials for firewalls and other security tools in accordance with information security requirements, prepare and publish in 1998 an analytical review of certified information security tools that can be used when connecting to international systems, including the Internet.
In addition, specific instructions were given at the meeting to the heads of federal executive bodies of the Russian Federation responsible for information security issues.
Press Center of the State Technical Commission of Russia