Interview with Yandex.Cloud expert

Think global, go local! And we truly believe in it. We jump into local areas of our customers and reinforce the partner ecosystems according to these principles. 

Russian market increases business possibilities and attracts international enterprises over the globe. Local data regulations such as FZ-152 might be a challenge to expand businesses in Russia.  

 

So, today we want to share with you a couple of insights from an interview with one of our trusted cloud partners – Yandex.Cloud

As a professional in the information security area, both regulations and practical aspects, Mikhail was able to provide InCountry with comprehensive answers to a series of most frequently asked questions and recommendations that need to be followed. 

Before going for a cloud computing platform what are the essential things to be taken into concern by users?

It is critical to understand the areas of shared responsibility. Systems using cloud services require security responsibilities to be divided and shared by the client-owner of the system and the provider-owner of the cloud infrastructure used by the system. This division changes based on the cloud service model used by the client system (IaaS, PaaS). Be concrete here as much as you can. Follow the principle: “several companies/persons are responsible for something” means “no one is responsible”.

Do your homework: Prepare the new threat and intruder models considering things described and discussed above. Choose the appropriate security tools and solutions. Which ones will be provided by the cloud provide? Who will be responsible for their administration?

There’s a number of other concerns we can’t list here because of lack of time but the main idea is to keep in mind the new cloud setup of data processing.

Talk about Yandex.Cloud’s strengths and how does it stand compared with other cloud providers?

Let’s talk about several points.

Yandex.Cloud is a part of Yandex

We use our own physical infrastructure

We collaborate with hardware vendors to provide our customers with the best service

Yandex.Cloud pays a lot of attention to compliance procedures

Some market numbers

About our services

What steps does Yandex.Cloud take to protect customers’ data?

Yandex.Cloud security employs a set of security tools at different levels to safeguard against a single threat. This approach increases the cost of any potential attack and lets us quickly identify and prevent unauthorized activities of attackers.

Yandex.Cloud complies with local regulatory requirements and meets industry standards.

We provide comprehensive security for our cloud infrastructure: physical security (own data centers, own communication channels, video surveillance, regulated access, etc.), monitoring, data protection (encryption, guaranteed deleting data, etc.).

We implement security solutions for our customers (Identity and Access Management, Firewall, Key Management System, Certificate Management, Audit, etc.) and develop the marketplace with popular security solutions provided by our partners (Check Point, Open VPN, Wallarm, Kaspersky, etc.)

How do you view the Yandex.Cloud and InCountry partnership?

First, it’s critical for every company working with Russian customers to be compliant with local law and don’t make the life of their users and customers harder. I believe together we can solve this problem.

There’re a huge number of services for different purposes which can be used by customers according to their own business reasons and vision. And a significant part of them is not available locally because of different reasons. Yandex.Cloud is the mature cloud platform and can host the customer data and parts of these services locally. InCountry has the expertise of creating solutions for a distributed cloud, enabling data residency and localization solutions. Together we can land every service locally, make it compliant according to Russian law, and transparent for the end customer.

From this point of view, our partnership looks very promising and potentially would bring a lot of benefits to our customers.

What would you say to global companies considering entering the Russian Federation market?

I’ll take the liberty of saying that it’s not very specific to Russian market and dictated by common sense. Don’t be afraid, schedule a time to make some research before entering the market, find a partner with good knowledge and reputation, be sure that you put the customers’ data first, design and implement your product or service according to this concept, be sure that you could handle the data according to the law and you have enough capacity.

If you have any questions related to data localization in Russia, please contact us at sales@incountry.com