GAIDAR INSTITUTE COMPLETED A STUDY ON THE USE OF CLOUD SERVICES IN THE GOSOBLAKO AND GOSTEKH PROJECTS
In February-March 2022, Gaidar Institute experts did a study on the switchover of government information systems to cloud technologies within the framework of the GosOblako and GosTech projects.
The purpose of the study was to follow the processes of creating government cloud platforms in Russia, as well as the legal problems associated with such a transition, including the issues of FSTEC certification, public procurement, etc., as well as to draw fr om international experiences in transferring government information systems to cloud technologies.
One of the tasks identified by the IEP experts is the development of standards for a multi-cloud management platform in the GosOblako and GosTech projects, which will integrate many cloud service providers into the intended government cloud system, provide the means to move between the cloud services whenever necessary, and ensure data security, elasticity, scalability, and service compatibility.
Another task is to optimize and develop the requirements for certification of information security tools and data processing centers in accordance with the FSTEC standards for cloud services. In this particular case, based on foreign experiences, the FSTEC may consider the possibility of recognizing certificates issued in accordance with international standards (for example, ISO standards) in order to simplify the certification procedure.
It is also necessary to develop public procurement legislation in order to apply a flexible procurement system, thus making it possible to pay for services depending on their use (the “pay-as-you-go” principle). That is, instead of a fixed price or the maximum contract price, payments under contracts will be charged depending on the quantity of services consumed (for example, per terabyte/gigabyte of memory storage, minute/second of use, etc.).
Another important component is the creation of the GosMarket digital platform, a marketplace with a catalog of cloud service providers, wh ere government agencies will be able to select the best providers by comparing their services (technical characteristics, cost models and service levels, prices).
Detailed study report (including international experience)
Short version of the report
Study presentation
One of the tasks identified by the IEP experts is the development of standards for a multi-cloud management platform in the GosOblako and GosTech projects, which will integrate many cloud service providers into the intended government cloud system, provide the means to move between the cloud services whenever necessary, and ensure data security, elasticity, scalability, and service compatibility.
Another task is to optimize and develop the requirements for certification of information security tools and data processing centers in accordance with the FSTEC standards for cloud services. In this particular case, based on foreign experiences, the FSTEC may consider the possibility of recognizing certificates issued in accordance with international standards (for example, ISO standards) in order to simplify the certification procedure.
It is also necessary to develop public procurement legislation in order to apply a flexible procurement system, thus making it possible to pay for services depending on their use (the “pay-as-you-go” principle). That is, instead of a fixed price or the maximum contract price, payments under contracts will be charged depending on the quantity of services consumed (for example, per terabyte/gigabyte of memory storage, minute/second of use, etc.).
Another important component is the creation of the GosMarket digital platform, a marketplace with a catalog of cloud service providers, wh ere government agencies will be able to select the best providers by comparing their services (technical characteristics, cost models and service levels, prices).
Detailed study report (including international experience)
Short version of the report
Study presentation
Tuesday, 31.05.2022