Certified Data Center Segment Product Description
Certified Data Center segment (A-DC) — IT infrastructure for hosting an information system with increased information protection requirements. Requirements are met in accordance with the separation of areas of responsibility.
Only dedicated servers of a custom configuration and network equipment provided by Selectel may be located in the A-DC.
A-DC is used for:
- certification of the information system in accordance with the requirements of FSTEC Orders No. 117 and No. 21;
- processing of personal data up to the first (maximum) security level in accordance with the requirements of 152-FZ;
- security monitoring at the infrastructure level;
- increasing service user loyalty by meeting the requirements of Russian laws and international standards.
To meet security requirements, the A-DC service includes:
- data center engineering infrastructure;
- certified information system (hereinafter — IS) "Managed Security Services";
- certified IS "Administration";
- certified IS "Information Security Monitoring".
A-DC services
Colocation in A-DC
Ensures compliance with requirements for data center engineering infrastructure in accordance with PCI DSS, 152-FZ (FSTEC Orders No. 117 and No. 21), GDPR, SOC-2, ISO 27001, ISO 27017, ISO 27018, implements security measures related to physical access to equipment, and maintains continuous infrastructure operation.
When choosing an infrastructure level service, the following are provided:
- dedicated servers of a custom configuration;
- hardware firewall: Fortinet, UserGate, Cisco, Kontinent, CheckPoint;
- optional: Selectel network equipment.
With the Colocation in A-DC service, you can connect additional information security services:
All equipment is placed in racks belonging to the A-DC service.
When connecting servers to the A-DC, a standard connection diagram is used.
Dedicated servers are switched behind a dedicated firewall and do not have a direct connection to Selectel internal networks or other customers' networks. Because of this, Selectel internal systems have no access to server information, and you cannot manage the server through the Selectel Control Panel. In the Selectel Control Panel, the following message is displayed for such servers: "No power information available". All external network connections go through the firewall.
You can connect to servers in the A-DC only through IPMI interfaces switched into the firewall.
When conducting a performance evaluation (certification) of an information system hosted in the A-DC, the following are provided:
- an excerpt from the document "Threat Model and Data Security Violator of the Data Center Engineering Infrastructure Information Security provided within the framework of the 'Certified Data Center Segment' service of Selectel Joint Stock Company";
- confirmation of infrastructure placement;
- firewall serial numbers and special security marks;
- if additional information security services are used — serial numbers and special security marks.
Server protection
Provides protection against current threats, compliance with the requirements of FSTEC Russia Orders No. 17 and No. 21, as well as the requirements of international standards applicable to information systems within the client's area of responsibility.
When activating the service, you are provided with access to the selected specialized software or hardware-software information protection tool:
Managed security services and administration
Allows for both one-time installation and configuration of information protection tools and full system support, including response to security incidents.
The service is provided using IS "Administration", IS "Managed Security Services", and IS "Information Security Monitoring", which allows transferring certified systems to Selectel for administration without violating legislative requirements.
Information protection requirements met
Compliance with requirements within Selectel's area of responsibility is regularly reviewed and confirmed by external auditors.
Areas of responsibility
Selectel is responsible for security related to physical access to IT infrastructure and implements a portion of physical security measures that fall within its area of responsibility.
Selectel is not responsible for the operation of server system and application software, firewall administration, or security related to logical access to the information system. Internal Selectel systems do not have access to servers hosted in the A-DC.
Cost
Depending on the account balance type, a unified balance or main balance is used for payment. Before ordering a service, top up your balance.
The cost depends on the amount of equipment to be placed and the additional services ordered. It includes:
- cost of a custom configuration dedicated server;
- firewall cost;
- cost of the Colocation in the Certified Data Center Segment 1U service. The service must be ordered for each unit;
- cost of chosen information protection tools within the Server Protection service.