FSB will simplify the procedure for reporting personal data leaks
[ad_1]
The FSB is working on a draft order, according to which personal data operators (PD) will have a choice of how to notify the regulator about a hack or information leak that has occurred. This was announced on November 15 at the SOC forum (the Security Operation Center forum is dedicated to monitoring information security, its organizers are the FSB and the FSTEC), said Andrey Raevsky, a representative of the National Coordination Center for Computer Incidents (NCCCI) under the FSB.
The new document is being developed in accordance with the changes in the law “On Personal Data”, which entered into force on September 1, 2022, Raevsky specified. In accordance with them, all PD operators must report computer incidents to the State System for Detecting, Preventing and Eliminating the Consequences of Computer Attacks (GosSOPKA). Previously, only subjects of critical information infrastructure (CII), i.e. banks, telecom operators, fuel and energy companies, etc. had to interact with GosSOPKA.
[ad_2]
Source link
