As Anton Nemkin notes, the current version of the bill indicates that the conditions for the supplier to have a license to carry out activities for the technical protection of confidential information may not apply if the said supplier is part of the banking group of the financial institution that ordered such a service from the supplier. "We believe that these provisions are unfounded and propose excluding them from the bill," he said.
"It is unclear why the original lithuania whatsapp number database text made an exception for organizations that are part of a group. Independent outsourcing must have such a license. The requirements must be the same, regardless of the form of ownership," he believes.
In terms of regulating the activities of organizations, the current version of the bill provides that the Central Bank acts as the controlling body. However, as noted by deputies from the Information Policy Committee, the bill does not provide for a mechanism for state control and supervision by authorized federal executive bodies over the implementation of legislation by outsourcing and cloud service providers.
Egor Bigun, Director of Information Security at Beeline Cloud (PJSC VimpelCom), told a ComNews correspondent: "We positively assess the legislative initiative on requirements for outsourcing information technology in the financial market. There are obvious difficulties in interaction between IT service providers and financial sector companies. Firstly, credit and financial institutions are concerned that the service provider will directly or indirectly gain access to information protected by law. Secondly, the issue of delineating responsibility for failure to comply with the requirements of the Central Bank of the Russian Federation regulations, such as GOST R 57580.1-2017, has not yet been resolved. We expect that the new bill will create uniform rules of the game in this industry and will allow customers from the financial market not to be afraid to contact service providers."
The bill on outsourcing IT services for financial organizations was introduced by State Duma deputies Anatoly Aksakov, Arkady Svistunov, Oleg Savchenko and others in the summer of 2023. It is aimed at lifting restrictions on the use of outsourcing IT functions and cloud services by financial organizations. The relevant committee is the State Duma Committee on Financial Markets. The State Duma Committee on Information Policy is a co-executor. The first hearing of the bill will take place in the autumn session of 2023.
According to Andrey Salomatin, this change is logical.
-
- Posts: 523
- Joined: Thu Jan 02, 2025 7:08 am