Accreditation in FSTEC

Question

Professional Certification

Good day, friends.

To participate in certain tenders and projects of our company, apparently, there is nothing left but to obtain accreditation (certification?) in the FSTEC.

Has anyone already experienced something similar? Filling out documents and other pitfalls and can share your experience?

Thanks in advance.

Answer 1

When we had such a question, and the fighters who studied this issue, they issued the following:
The main problem is in the equipment that is necessary to have in order to obtain accreditation. It is absolutely useless (for what we planned to do) and very, very expensive. As an option, the issue of signing a lease agreement with one of the research institutes that have such devices was considered. BUT not every regional FSTEC considers such agreements legitimate. Yes, and specific ones are not asleep and “give a paw” to research institutes so that they do not conclude such agreements with anyone.
This concludes our experience :) Sori, if by.

Answer 2

For what type of activity? When it comes to the technical protection of information, the words "accreditation" and "certification" are both wrong. You need to go through the licensing process. The requirements for the license applicant are written in government decree No. 79.
The focus with the rental of measuring equipment will not work at all now. I explain why. Previously, FSTEC licenses for TZKI were issued for 5 years. It is necessary to rent equipment for the duration of the license. The licenses are now perpetual. Accordingly, no one will conclude an indefinite lease agreement with you, so you will have to purchase equipment. In addition to equipment, you will have to fork out a little for official publications of GOSTs, SNIPs and other regulatory documents. Also, you must have a certified premises for information security requirements and a certified workstation (that is, a computer), and since you do not have your own license for TZKI, you will have to unfasten the licensees for work, plus equip the premises and the certified computer with information security tools (otherwise fail the test). There are certain requirements for the education of staff. In general, read the 79th resolution.

Answer 3

Thanks for the advice guys.
Thank you very much, I hope it helps