What does Class ME mean NDV level ISPD class?

Question

Information Security

Hello, I found a table of certified MEs, there are columns there: OIE class NDVB level ISPD class. Please explain in more detail what this means? What determines the class, level ... and what is needed for what purposes. Thank you.

Answer 1

The classifications are described in the FSTEC guidance documents.
Tab - special regulatory documents and orders.
fstec.ru/tekhnicheskaya-zashchita-informatsii/dokumenty
ME classes, NDV levels depend on the fulfillment of specific requirements and safety controls in products.
Ispdn classes characterize the information system itself and depend on the volume of pers. data and its type. But the ispdn classes are a little outdated - see PP 1119.
And all this is needed to determine the minimum security requirements for products for use in systems of varying degrees of secrecy and criticality.
If secret or personal data is processed in your system, then in some cases you will need to use only certified by the ME of specific classes.