Network storage in the organization and the organization of remote access to it in accordance with Federal Law 152?

Question

Law in IT

Hello. There was a question of organizing access for remote employees to data stored on storage within the organization. How is it possible to give them access, in accordance with fz 152, to each of them to a folder defined for them on this storage? Is it possible to use solutions such as QNAP D2 Network Storage or similar services with vpn support. Or is it necessary to raise a vpn server on a PC? Or are there other solutions. We need a kind of analogue of Google or Yandex disk.

Answer 1

Read the relevant documents. For example, the order of the FSTEC No. 21 and the order of the FSB of the Russian Federation No. 378.
In general, here is an overview article, with links to the governing documents: https://kontur.ru/articles/1763
As for the technical side of the issue, then if in a good way, then QNAP and similar solutions cannot be used at all, and even more so they cannot be put on the Internet directly. Regardless of whether they have a VPN there or not. But if you don't care about real security, then you can exhibit.

Answer 2

Try to look towards Synology, they have the ability to do two-factor authentication using Google Authentication.

Answer 3

Officially, such ISPDs should be closed from external access. Or, in extreme cases, try to find domestic software for implementing remote access, which is extremely difficult.