<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta>
      <journal-title-group>
        <journal-title>Security-oriented cloud computing platform for critical
infrastructures. Computer Law &amp; Security Review</journal-title>
      </journal-title-group>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="doi">10.2139/ssrn.2410270</article-id>
      <title-group>
        <article-title>New Prospects for the Use of Cloud Computing by Control and Supervisory Bodies in Russia</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Mikhail Bundin</string-name>
          <email>mbundin@mail.ru</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Aleksei Martynov</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>4</institution>
          ,
          <addr-line>Ashkhabadskaya st., Nizhny Novgorod, 603105</addr-line>
          <country country="RU">Russia</country>
        </aff>
      </contrib-group>
      <pub-date>
        <year>2019</year>
      </pub-date>
      <volume>28</volume>
      <issue>6</issue>
      <fpage>12</fpage>
      <lpage>13</lpage>
      <abstract>
        <p>There is an international tendency to intensify the processes of adaptation of new (endto-end) information technologies in the field of public administration, including cloud computing. One of the most recent imitative is to create one and only online platform for public audits and inspections - a standard cloud solution integrated with other State information systems. Despite a certain immaturity/incompleteness of this solution it remains a key direction for further innovation of control and supervisory system in Russia. Acknowledgement: The reported study was funded by RFBR according to the research project No. 20-011-00584.</p>
      </abstract>
      <kwd-group>
        <kwd>E-government</kwd>
        <kwd>State Control</kwd>
        <kwd>Cloud Technologies</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>2. Recent International Practice</title>
      <p>The use of cloud solutions by modern governments is becoming a global trend (Gasser, 2014). The
United States can be considered one of the few countries that have been actively promoting the use
of cloud solutions. In 2019, a new version of Federal Cloud Computing Strategywas announced
"Smart Cloud"(The 2019 Federal Cloud Computing Strategy, 2019). The strategy envisions a
longterm model for the safe transition of federal agencies to the use of cloud technologies in order to
further reduce costs, improve security and speed of service delivery. An important role in
introducing technological innovations in the public administration system at the federal level is
played by the Federal Risk and Authorization Management Program (FedRAMP), the essence of
which is expert risk assessment and standardization in the implementation of cloud services by
federal agencies. In fact, any decision to use cloud solutions that involves the use of federal data
must be verified under a special program procedure.</p>
      <p>The European Union in 2020 developed new strategy for data (A European strategy for data, 2020),
which containes significant provisions concerning the further implementation of cloud computing
technologies in the public sector. In particular, the document noted the still low level of "use" of
cloud solutions in the public sector, which could potentially lead to a decrease in the efficiency of
providing public services. As a solution, the Strategy involves several steps aimed at developing an
appropriate legal framework for the creation of pan-European data pools, further steps to develop
partnerships between the public sector and providers of digital services. A special role in the
document was assigned to the creation of a legal framework for the creation of data clouds and cloud
services for the system of public procurement and law enforcement.</p>
      <p>Since 2015, China has developed a number of policy and strategic documents on the
implementation of cloud computing technologies in the public sector. According to them, cloud
computing service platforms and data centers that provide services to the party and the government
should be located in China, and confidential information should not be transmitted, processed or
stored outside the state. A security or confidentiality agreement may be entered into by the
departments and the service provider. However, enterprises that are related to state secrets or
official secrets are prohibited from using cloud services (Murphy, 2019). One of the Chinese
ITleader Huawei is now actively promoting the "one cloud + one lake + one platform" strategy. This
strategy helps speed up data integration and exchange between different government information
systems (Xin, 2020, p. 13).</p>
    </sec>
    <sec id="sec-2">
      <title>3. Conclusions</title>
      <p>Based on current foreign practices’ analysis it is possible to highlight some issues for further
improving the legal framework for the use of cloud solutions in control and supervisory activities
in Russia:
• to develop competitive environment for cloud solution providers, including import
substitution, priority for Russian developers, and the criteria for admission of foreign
suppliers;
• to formulate in detail and correct form the general and specific requirements for cloud
solutions admission in the public sector, including through the public procurement system;
• to improve provisions on IoT &amp; information security, privacy (Mackay, 2012, p. 679);
• to envisage provisions on training staff and personnel to work with cloud solutions.
A European strategy for data. (2020). EUR-Lex.europa.eu,
https://eur-lex.europa.eu/legalcontent/EN/TXT/?qid=1593073685620&amp;uri=CELEX%3A52020DC0066</p>
      <p>About the Authors
Mikhail Bundin
Aleksei Martynov
Mikhail Bundin works as Assistant Professor for the of administrative and financial law chair at Lobachevsky
State University of Nizhny Novgorod. In 2018 he obtained his PhD degree in law of informatics at the Institute
of Legislation and Comparative Law under the Government of the Russian Federation. He speaks Russian,
English, French.</p>
      <p>Aleksei Martynov works as head for the of administrative and financial law chair at Lobachevsky State
University of Nizhny Novgorod. He is full professor and one of the leading experts in the field of
administrative law and procedure, regulation of state control and supervision in Russia, since 2016 - Head
of PhD Council in administrative law &amp; procedure. He speaks Russian, English.</p>
    </sec>
  </body>
  <back>
    <ref-list />
  </back>
</article>