How is the protection of state secrets implemented?

Question

Information Security

Good afternoon!
I need to know how companies that are licensed to work with state secrets protect it accordingly.
I’m interested in exactly what actions they specifically do, I went through a lot of laws, but I didn’t find specific actions there (
And the same question is only for those who check those who protect state secrets (For example, the Interdepartmental Commission for the Protection of State Secrets)
I understand that what a strange question, but
still.Thanks in advance!

Answer 1

AWS and servers for work must comply with certification:
https://xn--90ao1ar.xn--p1ai/attestatsiya_fstek/at...
https://77fsb.ru/zashchita-gostayny/attestaciya/arm
Look in this direction, GOSTs there is.

Answer 2

A very vague question. Everything is checked and protected. There are specific requirements to obtain a license to process GT, and see them.

Answer 3

It looks like a question from a provocateur from specialized agencies))
In general, the requirements and measures to protect GT are themselves GT. So no one will explain anything clearly to you here. If there is an appropriate permit, then go ahead to study the STR and its supplement, certification requirements and other documents.
If there is no permission and it's completely itchy, then try to find distribution kits for products like DallasLock -С, SecretNet or AstraLinux Smolensk, and pick them up. And by the way, studying the open STR-K will also help.

Answer 4

If you are already in such a company and the company already has a permit to work with GT, you can safely contact the FSB and FSTEC for advice and the right to familiarize yourself with the regulation if it is not in the organization.