Regulatory Framework

PDF

Government Resolution No. 127 of February 8, 2018

  On approval of the Rules for categorizing critical information infrastructure facilities of the Russian Federation, as well as a list of indicators of criteria for the significance of critical information infrastructure facilities of the Russian Federation and their values

Download PDF
PDF

No. 184-FZ On Technical Regulation

Federal Law of the Russian Federation "On Technical Regulation" No. 184-FZ of December 27, 2002 (as amended on July 13, 2015)

Download PDF
PDF

No. 412-FZ On accreditation in the national accreditation system

Federal Law of the Russian Federation "On Accreditation in the National Accreditation System" No. 412-FZ of December 28, 2013

Download PDF
PDF

No. 187-FZ On the Security of Critical Infrastructure of the Russian Federation

Federal Law of the Russian Federation "On the Security of Critical Information Infrastructure of the Russian Federation" No. 187-FZ of July 26, 2018

Download PDF

Image

Methodology from February 11, 2019

  Methodology for identifying vulnerabilities and undeclared capabilities in software

Download JPG
PDF

Certification Regulations

 Regulations on the information security certification system (Order of the Federal Service for Technical and Export Control of Russia No. 55 of April 3, 2018)

Download PDF
Image

Order No. 131 of July 30, 2018

 Information security requirements establishing levels of trust in technical information protection tools and information technology security tools

Download JPG
PDF

Order No. 235 of December 21, 2017

  On approval of requirements for the creation of security systems for significant objects of the critical information infrastructure of the Russian Federation and ensuring their functioning

Download PDF
PDF

Order No. 236 of December 22, 2017

  On approval of the form for submitting information on the results of assigning one of the categories of significance to a critical information infrastructure facility or on the absence of the need to assign it one of such categories

Download PDF
PDF

Order No. 239 of December 25, 2017

  On approval of requirements for ensuring the security of significant objects of the critical information infrastructure of the Russian Federation

Download PDF
PDF

Order No. 31 of March 14, 2014

  On approval of requirements for ensuring information security in automated control systems for production and technological processes at critical facilities, potentially hazardous facilities, as well as facilities posing an increased danger to human life and health and to the environment

Download PDF
Image

RD AS (FSTEC of Russia)

Guidance document. Automated systems. Protection against unauthorized access to information. Classification of automated systems and information security requirements.

Download JPG
Image

RD SVT (FSTEC of Russia)

Guidance document. Computer equipment. Protection against unauthorized access to information. Indicators of protection against unauthorized access to information

Download JPG

Image

TR CU 001/2011

Technical Regulations of the Customs Union. On the Safety of Railway Rolling Stock

Download JPG
Image

TR CU 002/2011

Technical Regulations of the Customs Union. On the safety of high-speed rail transport

Download JPG
Image

TR CU 003/2011

Technical Regulations of the Customs Union. On the Safety of Rail Transport Infrastructure.

Download JPG

Image

STO RZhD 02.037-2011

 Resource, Risk, and Reliability Management at Life Cycle Stages (URRAN). Life Cycle Cost Management of Systems, Devices, and Equipment of JSC Russian Railways.

Download JPG
Image

STO RZhD 02.038-2011

Risk Management in Traffic Safety Organization

Download JPG
Image

STO RZhD 02.042-2011

 Resource Management at Life Cycle Stages, Risks, and Reliability Analysis (URRAN). Systems, Devices, and Equipment for Automation and Telemetry. Reliability and Functional Safety Requirements.

Download JPG
Image

STO RZhD 02.048-2014

Traction rolling stock. Nomenclature of reliability and functional safety indicators.

Download JPG
Image

STO RZhD 02.049-2014

Automated control systems for technological processes and technical equipment of railway transport. Requirements for the functional and information security of software: conformity assessment procedure.

Download JPG

Image

IBTrans LLC has developed the GOST-R standard "Metro Rolling Stock. Requirements for Functional and Information Security of Software and Control Methods." This standard will become one of the supporting standards of the EAEU Technical Regulations.

IBTrans LLC has developed the GOST-R standard "Metro Rolling Stock. Requirements for Functional and Information Security of Software and Control Methods." This standard will become one of the supporting standards of the EAEU Technical Regulations.

Download JPG
Image

GOST 19.202


Unified System of Software Documentation. Specification. Content and Design Requirements.


Download JPG
Image

GOST 19.401-78

 Unified System of Software Documentation. Software Text. Content and Design Requirements

Download JPG
Image

GOST 19.402-78

Unified System of Software Documentation. Program Description

Download JPG
Image

GOST 19.501-78

 Unified System of Software Documentation. Form. Requirements for Content and Design

Download JPG
Image

GOST 19.502-78

 Unified System of Software Documentation. Description of Application. Requirements for Content and Design

Download JPG
PDF

GOST 33432

  Functional security. Policy, security program

Download PDF
PDF

GOST 33433


Functional Safety. Risk Management in Rail Transport


Download PDF
Image

GOST 33435

 Control, monitoring, and safety devices for railway rolling stock. Safety requirements and control methods

Download JPG
Image

GOST 33892-2016

Railway automation and telemetry systems at marshalling yards. Safety requirements and control methods

Download JPG
Image

GOST 33893-2016

Railway automation and telemetry systems at level crossings. Safety requirements and control methods

Download JPG
Image

GOST 33894-2016

  Railway automation and telemetry systems at railway stations. Safety requirements and control methods

Download JPG
Image

GOST 33895-2016

Railway automation and telemetry systems on railway lines. Safety requirements and control methods.

Download JPG
Image

GOST 33896-2016

 Train traffic control and dispatching systems. Safety requirements and control methods

Download JPG
Image

GOST 33897-2016

Railway Telecommunications. Methods for Monitoring Safety Requirements

Download JPG
PDF

GOST 34009-2016

 Railway Traction Rolling Stock Control Systems and Tools. Software Requirements

Download PDF
Image

GOST R 50739-95

Computer Equipment. Protection from Unauthorized Access to Information. General Technical Requirements

Download JPG
Image

GOST R 51188-98

 Information Security. Software Virus Testing. Standard Guide

Download JPG
Image

GOST R 51293-2022

Conformity Assessment. General Rules for Product Identification for Conformity Assessment Purposes

Download JPG
Image

GOST R 51293-2022

Conformity Assessment. General Rules for Product Identification for Conformity Assessment Purposes

Download JPG
Image

GOST R 51904-2002

Embedded Systems Software. General Requirements for Development and Documentation

Download JPG
Image

GOST R 52980

Industrial automation systems and their integration. Programmable electronic systems for railway applications. Software requirements.

Download JPG
Image

GOST R 55681-2013

 Information and Documentation. Analysis of Work Processes from a Document Management Perspective

Download JPG
Image

GOST R 56920-2016

Systems and Software Engineering. Software Testing. Part 1. Concepts and Definitions

Download JPG
Image

GOST R 56921-2016

Systems and Software Engineering. Software Testing. Part 2. Testing Processes

Download JPG
Image

GOST R 56922-2016

Systems and Software Engineering. Software Testing. Part 3. Test Documentation

Download JPG
Image

GOST R 56939-2016

 Information Security. Developing Secure Software. General Requirements

Download JPG
Image

GOST R 57193-2016

Systems and Software Engineering. Systems Life Cycle Processes

Download JPG
Image

GOST R 57445-2017

Railway Equipment. General Requirements for Resource Determination Methods

Download JPG
Image

GOST R 58973

Conformity assessment. Rules for preparing test reports

Download JPG
Image

GOST R 58973

Conformity assessment. Rules for preparing test reports

Download JPG
Image

GOST R IEC 61508-

Functional safety of electrical, electronic, and programmable electronic safety-related systems. Part 3: Software requirements

Download JPG
Image

GOST R ISO/IEC 12119-2000

Information Technology. Software Packages. Quality Requirements and Testing

Download JPG
Image

GOST R ISO/IEC 12207-2010

 Information Technology. Systems and Software Engineering. Software Life Cycle Processes

Download JPG
Image

GOST R ISO/IEC 25010-2015

 Information Technology. Systems and Software Engineering. Systems and Software Quality Requirements and Assessment (SQuaRE). Systems and Software Quality Models

Download JPG
Image

GOST R ISO/IEC 25021-2014

Information Technology. Systems and Software Engineering. Systems and Software Quality Requirements and Evaluation (SQuaRE). Quality Indicator Elements

Download JPG
Image

GOST R ISO/IEC 25040-2014

Information Technology. Systems and Software Engineering. Systems and Software Quality Requirements and Evaluation (SQuaRE). The Evaluation Process

Download JPG
Image

GOST R ISO/IEC 25041-2014

 Information Technology. Systems and Software Engineering. Systems and Software Quality Requirements and Evaluation (SQuaRE). Evaluation Guide for Developers, Acquirers, and Independent Evaluators

Download JPG
Image

GOST R ISO/IEC 25051-2017

Information Technology. Systems and Software Engineering. Systems and Software Quality Requirements and Evaluation (SQuaRE). Requirements for the Quality of a Ready-to-Use Software Product (RUSP) and Testing Guidelines

Download JPG
Image

GOST R ISO/IEC 27002-2012

 Information Technology. Security Methods and Tools. Information Security Management Standards and Rules

Download JPG
Image

GOST R ISO/IEC 33003-2017

Information Technology. Process Assessment. Requirements for Process Measurement Systems

Download JPG
Image

ГОСТ Р ИСО/МЭК 33020-2017

 Information Technology. Process Evaluation. Process Measurement System for Assessing Process Capability

Download JPG
Image

GOST R ISO/IEC 9126-93

Information Technology. Software Product Evaluation. Quality Characteristics and Guidelines for Their Use

Download JPG
Image

GOST R IEC 61508-2

Functional safety of electrical, electronic, and programmable electronic safety-related systems. Part 2: Software requirements

Download JPG
Image

GOST R IEC 61508-2

Functional safety of electrical, electronic, and programmable electronic safety-related systems. Part 2: Software requirements

Download JPG
Image

GOST R IEC 61508-7

Functional safety of electrical, electronic, and programmable electronic safety-related systems. Part 7. Methods and tools

Download JPG
Image

GOST R IEC 61508-7

Functional safety of electrical, electronic, and programmable electronic safety-related systems. Part 7. Methods and tools

Download JPG
Image

GOST R IEC 62279-2016

Communication, signaling, and data processing systems on railways. Software for control and protection systems on railways.

Download JPG
Image

RD 50-34.698-90

Automated Systems. Document Content Requirements

Download JPG
Image

Guidance document "Protection against unauthorized access to information. Part 1. Information security software. Classification by level of control over the absence of undeclared capabilities"

Guidance document "Protection against unauthorized access to information. Part 1. Information security software. Classification by level of control over the absence of undeclared capabilities"

Download JPG
Image

Guidance document "Protection against unauthorized access to information. Part 1. Information security software. Classification by level of control over the absence of undeclared capabilities"

Guidance document "Protection against unauthorized access to information. Part 1. Information security software. Classification by level of control over the absence of undeclared capabilities"

Download JPG
Image

Guidance document "Concept of protecting computing equipment and automated systems from unauthorized access to information"

Guidance document "Concept for protecting computing equipment and automated systems from unauthorized access to information"

Download JPG