FSTEC of Russia Licences

List of work and services under Clause 4 of Government Resolution No. 79:

• assessment of protection of confidential information against leakage through technical channels in information systems, technical equipment located in protected premises, protected premises, and rooms used for confidential negotiations;
• assessment of protection against unauthorized access and modification in information systems;
• information-security monitoring of information systems;
• attestation testing and attestation for compliance with information-protection requirements for information systems and protected premises;
• secure design of information systems and protected premises;
• installation, assembly, commissioning, testing and repair of information-protection equipment.

2. Development and manufacture of confidential-information protection equipment — technical, software and integrated hardware-software protection tools, secure information-processing systems and tools for assessing protection effectiveness, excluding encryption tools, which fall within the competence of the Federal Security Service.

Technical protection of confidential information under Government Resolution No. 79:

• a manager or authorized person with higher education in information security and at least 3 years of experience; or higher education in mathematics, natural sciences, engineering or technology and at least 5 years of experience; or other higher education, at least 5 years of experience and professional retraining in information security of at least 360 classroom hours;
• engineering and technical personnel with relevant education or retraining; the minimum staffing level is at least 5, 9 or 15 engineering and technical employees depending on the declared types of work, under the 2024 version;
• non-residential premises at the place of business, held by ownership or another lawful right, located in the Russian Federation and compliant with information-protection requirements;
• verified measuring, control and testing equipment and protection-assessment tools; the information-protection tools used must be manufactured in Russia;
• attested information facilities and protected premises; for certification testing, a production-control system is also required.

Development and manufacture of confidential-information protection equipment under Government Resolution No. 171:

• a manager with higher education in information security and at least 5 years of experience, or other higher education, professional retraining of at least 360 hours and 5 years of experience;
• at least 2 engineering and technical employees with relevant education or retraining;
• premises and technical documentation compliant with applicable requirements.

• Federal Law No. 99-FZ.
• Technical protection of confidential information — Government Resolution No. 79 of 3 February 2012.
• Development and manufacture of confidential-information protection equipment — Government Resolution No. 171 of 3 March 2012.
• FSTEC Orders No. 3 and No. 4 of 12 January 2023, establishing document forms for technical protection activities and protection-equipment development and manufacture.

Indefinite. The activity requires attested information facilities or premises and the appropriate equipment.

45 business days.

Established by the Tax Code of the Russian Federation.