Yes, if the information security product is intended to be used to protect secret information.
Yes, if the information security product is intended for use in significant objects of critical information infrastructure, in government information systems, in automatic process control systems, in personal data information systems and in public information systems.
The content of the documentation set is regulated by the
Requirements by information security, setting the levels of trust in the means technical protection of information and security means information technologies approved by order of the FSTEC of Russia No. 76 dated June 2 2020.
The certification organization and procedure of the FSTEC of Russia are determined by the Regulation on the information security product certification system, approved by order of the FSTEC of Russia No. 55 dated April 3, 2018.
In general, information security product certification includes the following basic procedures:
- applying for certification;
- making certification decision of the information security product;
- certification testing of the information security product;
- expert opinion preparation based on the results of the information security product certification;
- issuance of a certificate of compliance.
The certificate of compliance is issued for the period specified in the certification application. Meanwhile the validity period of the certificate of compliance cannot exceed 5 years.
No, if the identified deficiencies are eliminated within the timeframes provided for by the certification agreement of information security product.
entrance from st. Lidia Bazanova (business center of JSC "NIIIT")
PSRN: 1186952003699
TRRC: 695001001
Settlement account: 40702810202220001844 with Alfa-Bank JSC
Corr. account: 30101810200000000593
BIC: 044525593