FSTEC has made important clarifications to the procedure

[tanjimajuha20]

At the SOC Forum 2022 conference, regulators shared their immediate plans for issuing new or adjusting existing documents. The largest number of announcements were made by FSTEC Deputy Director Vitaly Lyutikov. In particular, he stated that the new procedure for categorizing critical information infrastructure facilities is at the final stage of approval.

Read also

for categorizing critical information czech republic cell phone number list infrastructure
The Federal Service for Technical and Export Control (FSTEC) has shown its willingness to exclude from the list of critical information infrastructure (CII) facilities those that ensure the life of settlements with fewer than 10,000 residents. This removes 204 small towns and over 150,000 rural settlements from FSTEC regulation.

Vitaly Lyutikov also announced a long-awaited change in the internal regulations of FSTEC, according to which the certification periods will be significantly reduced. However, this does not apply to issues related to the work of test laboratories. Preferences are also given to companies that use safe development technologies, which has also been long expected.

"In recent years, FSTEC has been doing very interesting work to ensure safe development. That is, requirements are gradually being introduced that regulate the development process itself, and not just the properties of the developed software product. This provides a new level of security, the ability to actually ensure the life cycle of certified software. We are working on integrating control tools into our development infrastructure and we see a real improvement in the level of support for our products," says Alexey Smirnov, Chairman of the Board of Directors of Bazalt SPO LLC. In his opinion, it is too early to draw conclusions about reducing the deadlines, but FSTEC has always met the established standards before.

"It is important to understand that the certification procedure is a complex work and largely depends on the applicant and his readiness. Recently, FSTEC has reduced the deadlines for some procedural issues and simplified the requirements. These measures and the fact that SDL processes are being implemented by an increasing number of domestic developers, as well as the improvement of regulatory documentation, together provide a synergistic effect of acceleration," says Roman Karpov, Director of Strategy and Development of Axiom JDK Technologies at Bellsoft.