Mintsifra, FSB and FSTEC will be engaged in data security audit

The Ministry of Digital Development is discussing with the FSB and the subordinated Ministry of Defense FSTEC the possibility of conducting a voluntary annual audit for Russian companies – personal data operators (PD). This was told to Vedomosti by a source in a large IT company and confirmed by an interlocutor in a specialized association participating in discussions of the initiative of the Ministry of Digital Development with the industry. The press service of the Ministry of Digital Transformation, the FSB and the FSTEC did not respond to Vedomosti’s requests.

Now, in accordance with the legislation of the FSTEC and the FSB, they control how carefully PD operators approach the issue of their security. The relevant orders of the FSB and FSTEC regulate the requirements that must be met to protect data. But the problem is that these requirements of departments do not have time to be updated to meet the current cyber threats faced by companies, says a source in the profile association. “A voluntary audit by specialists is a more flexible story,” he explained.