Compliance with Security Standards
International standards and Russian legislation
Selectel infrastructure complies with international standards and Russian legislation requirements on information security and personal data protection. Learn more about conclusions and certificates confirming compliance with security requirements on the Security page on selectel.ru.
Existing Selectel clients can obtain additional documents certifying compliance with the appropriate standards:
- FSTEC orders: threat assessment results;
- PCI DSS: AOC, responsibility matrix;
- GOST 57580: responsibility matrix;
- SOC 2: report.
To request additional documents, create a ticket.
We confirm the compliance of Selectel products with security standards and legal requirements with statements, certificates of compliance, certification documents, and conclusions — learn more in the Information security compliance matrix for products section.
Product Information Security Compliance Matrix
You can download statements, certificates, and conclusions on the Security at Selectel page on selectel.ru.
Personal data
In accordance with Federal Law No. 152-FZ and GDPR requirements, you can entrust Selectel with personal data processing. List of actions with personal data performed by Selectel as a processor on instructions: storage, destruction. To execute an instruction under 152-FZ or a DPA, SCC under GDPR, create a ticket.
Types of information security tools according to security levels and GIS classes
The table summarizes the basic composition of required information security tools (IS tools) that Selectel can provide as services.
The composition of information security tools for a personal data information system (PDIS) can be modified based on technical specifics of the system, threat models, and the information security intruder model.
The need for cryptographic protection for ISPDn is determined by the threat model and depends on the ability to neutralize threats using other measures. Cryptographic protection for GIS is always used, regardless of the security level and system class, if the system meets one or more of the following conditions:
- communication channels that extend beyond the controlled zone exist;
- information can only be protected using cryptographic information security tools;
- legal validity of electronic documents and their protection against alteration is required.
The decision regarding the adequacy of applied information security tools is made by the information system owner or the FSTEC licensee conducting the attestation.
* Two-way two-factor authentication is required for all privileged access. Exceptions are only for local unprivileged access. For K1, the use of a hardware authentication device is required, such as a phone with TOTP or USB tokens.
** Dallas Lock trusted boot tool is certified by FSTEC of Russia and can be used for system certification according to GIS data protection requirements.
* ** PAC Sobol has FSB and FSTEC of Russia certificates and can be used to raise the cryptographic protection class to KS2 and KS3 classes.