Threat models were created, standard solutions were developed. The first deputy prime minister spoke during the government hour at the Federation Council. A quote worth reading the entire transcript: "In all these areas, a list of strategic and critically important objects was established, threat models were created, standard solutions were developed for active and passive protection, and requirements were established for the conservation of resources." Name: The Ministry of Defense and Industry are working together to increase air defense capabilities. "Active work is underway in all regions to create mobile firefighting teams and to strengthen emergency teams." Risks are identified on the government website on a weekly basis; The focus is on the sectors of society, transportation and energy, trade and logistics, information infrastructures and significant industrial plants. Great news. The list is set. Threat models were created. Standard solutions have been developed. Order requirements are set.
I immediately remembered the joke about the gopher, which is not visible. The typical owner of an object, who now chooses a protection system and signs an agreement with the integrator, has not seen the model of these threats. The designer considering the shield structures did not see. The expert who should assess the adequacy of the solution did not see it. Ozone breathed a sigh of relief. Now they have everything. Three days ago, the Ministry of Digital Development published a document on data center protection. called recommendations. If threat models are created and solutions are developed, why is the industry document advisory in nature? A week ago, the FAS finished the procedure of including protection costs in the tariff; The Ministry of Finance prepares a tax deduction. In both cases, the owner will have to justify the economic feasibility of the costs. The rationale is a reference to the threat model. Which line exactly, a line from the transcript? I admit that classified documents are not widely distributed.