{"id":112,"date":"2022-12-08T14:47:45","date_gmt":"2022-12-08T13:47:45","guid":{"rendered":"https:\/\/scanlock.cz\/dvanula\/?p=112"},"modified":"2024-05-29T20:18:22","modified_gmt":"2024-05-29T18:18:22","slug":"cina","status":"publish","type":"post","link":"https:\/\/scanlock.cz\/dvanula\/cina\/","title":{"rendered":"Koment\u00e1\u0159 firmy SCANLOCK k nov\u011b chystan\u00e9mu z\u00e1konu N\u00daKIBu"},"content":{"rendered":"
\n
\n

Nejlevn\u011bj\u0161\u00ed vyhr\u00e1v\u00e1. Takto zjednodu\u0161en\u011b lze popsat mechanismus v\u00fdb\u011brov\u00e9ho \u0159\u00edzen\u00ed dodavatele kamer a bezpe\u010dnostn\u00edch syst\u00e9m\u016f pro \u010deskou strategickou infrastrukturu. Tak se stalo, \u017ee u vybran\u00fdch elektr\u00e1ren, nemocnic, \u00fa\u0159ad\u016f, ve m\u011bstech, v\u00a0dopravn\u00edch prost\u0159edc\u00edch dopravn\u00edch podnik\u016f, ale i na \u0161kol\u00e1ch dohl\u00ed\u017e\u00ed na bezpe\u010dnost kamery vyroben\u00e9 v \u010c\u00edn\u011b. To se ale m\u00e1 zm\u011bnit.<\/h2>\n<\/div>\n<\/div>\n
\n
\n

N\u00e1rodn\u00ed \u00fa\u0159ad pro kybernetickou a informa\u010dn\u00ed bezpe\u010dnost (N\u00daKIB) p\u0159ipravuje z\u00e1kon, kter\u00fd by m\u011bl st\u00e1tu pomoci odhalit ned\u016fv\u011bryhodn\u00e9 dodavatele bezpe\u010dnostn\u00edch syst\u00e9m\u016f a sn\u00ed\u017eit mo\u017enost vyu\u017eit\u00ed jejich v\u00fdrobk\u016f u strategick\u00fdch instituc\u00ed. Vypisovatel\u00e9 v\u00fdb\u011brov\u00fdch \u0159\u00edzen\u00ed tak budou upozorn\u011bni, jestli se k sout\u011b\u017ei p\u0159ihl\u00e1sily i takov\u00e9 subjekty, na kter\u00e9 byly uvaleny mezin\u00e1rodn\u00ed sankce. Toto se bude t\u00fdkat tak\u00e9 zna\u010dek Hikvision a Dahua, kter\u00e9 jsou v \u010cesk\u00e9 republice velmi roz\u0161\u00ed\u0159en\u00e9. D\u016fvodem je mimo jin\u00e9 i zku\u0161enost s \u010d\u00ednsk\u00fdm p\u0159\u00edstupem, kdy firmy z\u00edsk\u00e1vaj\u00ed ze st\u00e1tu r\u016fzn\u00e9 v\u00fdhody za zprost\u0159edkov\u00e1n\u00ed cenn\u00fdch informac\u00ed \u010d\u00ednsk\u00e9mu st\u00e1tu, by\u0165 se tak d\u011bje v rozporu s mezin\u00e1rodn\u00edm pr\u00e1vem. Dodr\u017eovan\u00ed p\u0159\u00edsn\u00fdch pravidel GDPR \u00a0u t\u011bchto v\u00fdrobc\u016f technologi\u00ed je velmi sporn\u00e9 a mnohdy ani z\u00e1kazn\u00edk (budouc\u00ed majitel = spr\u00e1vce osobn\u00edch \u00fadaj\u016f) ani dodavatel dan\u00e9 problematice GDPR nerozum\u00ed, a tak ji v\u016fbec ne\u0159e\u0161\u00ed.<\/p>\n

SCANLOCK by uv\u00edtala je\u0161t\u011b p\u0159\u00edsn\u011bj\u0161\u00ed postup<\/h3>\n

Co si o nov\u00e9m z\u00e1konu mysl\u00ed firma SCANLOCK CZ, kter\u00e1 na \u010desk\u00e9m trhu p\u016fsob\u00ed jako distributor bezpe\u010dnostn\u00edch technologi\u00ed a soust\u0159ed\u00ed se hlavn\u011b na evropsk\u00e9 technologie s vysokou p\u0159idanou hodnotou? Z\u00e1kon v\u00edt\u00e1. Navrhla by ale i p\u0159\u00edsn\u011bj\u0161\u00ed postup \u2013 aby do\u0161lo k legislativn\u00ed zm\u011bn\u011b na objekty st\u00e1tn\u00edho z\u00e1jmu a tak\u00e9 na kritickou infrastrukturu a energetiku, nebyly kamerov\u00e9 syst\u00e9my z nev\u011brohodn\u00fdch zdroj\u016f v\u016fbec um\u00eds\u0165ov\u00e1ny.
Subjekt\u016fm slou\u017e\u00edc\u00edm ve\u0159ejnosti, jako jsou t\u0159eba \u0161koly, \u00fa\u0159ady a m\u011bsta, bychom m\u011bli d\u00e1t mo\u017enost uv\u00e1\u017eit, jestli je pro n\u011b povaha citliv\u00fdch dat natolik z\u00e1sadn\u00ed. Sami by se mohli rozhodnout, jestli uplatn\u00ed stejn\u00fd p\u0159\u00edstup pro vyps\u00e1n\u00ed ve\u0159ejn\u00e9 zak\u00e1zky, kter\u00fd bude uplat\u0148ovat st\u00e1t v\u00a0kritick\u00e9 infrastruktu\u0159e podle tohoto p\u0159ipravovan\u00e9ho z\u00e1kona.<\/p>\n

Riziko \u00faniku citliv\u00fdch dat a tok pen\u011bz z dotac\u00ed<\/h3>\n

Podle SCANLOCKu by st\u00e1lo za zv\u00e1\u017een\u00ed, zda-li se dodavatel\u00e9 v\u00fdrobk\u016f z \u010c\u00edny a Ruska maj\u00ed \u00fa\u010dastnit dota\u010dn\u00edch program\u016f. Velk\u00e1 \u010d\u00e1st pen\u011bz z t\u011bchto dotac\u00ed plyne do zem\u00ed, kde jsou v\u00fdrobci t\u011bchto produkt\u016f podporov\u00e1ni st\u00e1tn\u00edmi dotacemi za \u00fa\u010delem z\u00edsk\u00e1v\u00e1n\u00ed konkr\u00e9tn\u00edch trh\u016f. Takov\u00e1 firma je pak v sout\u011b\u017ei jednak cenov\u011b zv\u00fdhodn\u011bna p\u0159ed spole\u010dnostmi z jin\u00fdch zem\u00ed, jednak zde v\u017edy existuje riziko \u00faniku citliv\u00fdch dat. N\u011bkdy vlivem pou\u017eit\u00ed zastaral\u00e9ho softwaru, jindy aplikac\u00ed speci\u00e1ln\u00edho protokolu, kter\u00fd umo\u017e\u0148uje firm\u00e1m naprosto z\u00e1m\u011brn\u011b manipulovat s daty a vyu\u017e\u00edvat pro vlastn\u00ed \u00fa\u010dely. N\u011bkdy sta\u010d\u00ed m\u00e1lo a z\u00a0v\u00fdb\u011brov\u00e9ho \u0159\u00edzen\u00ed se lehce dozv\u00edte, jak\u00e1 instituce vyu\u017e\u00edv\u00e1 jak\u00e9 technologie, kde jsou nasazen\u00e9 a v\u00a0jak\u00e9m rozsahu.<\/p>\n

St\u00e1t jako z\u00e1jemce o auto, kter\u00fd nev\u00ed, zda v\u00a0n\u011bm vozit lidi, nebo p\u00edsek<\/h3>\n

SCANLOCK upozor\u0148uje na to, \u017ee ve ve\u0159ejn\u00fdch zak\u00e1zk\u00e1ch by m\u011bla b\u00fdt v\u00edce ne\u017e cena zohledn\u011bna tak\u00e9 samotn\u00e1 pot\u0159eba a z\u00e1jmy koncov\u00e9ho u\u017eivatele. V\u011bt\u0161ina v\u00fdb\u011brov\u00fdch \u0159\u00edzen\u00ed jsou vypsan\u00e1 na technick\u00e9 parametry konkr\u00e9tn\u00edch kamer, jako je nap\u0159\u00edklad jejich citlivost, rozli\u0161en\u00ed, velikost \u010dipu apod., ale v\u016fbec se neuv\u00e1d\u00ed, jak\u00e9 pot\u0159eby m\u00e1 cel\u00fd syst\u00e9m plnit z pohledu u\u017eitn\u00fdch vlastnost\u00ed pro konkr\u00e9tn\u00ed objekt\/z\u00e1kazn\u00edka. Nerozli\u0161uje ani, jak\u00e9 d\u00edl\u010d\u00ed technologie jsou pro dan\u00e9 u\u017eit\u00ed vhodn\u00e9. St\u00e1t je pak podobn\u00fd z\u00e1kazn\u00edkovi, kter\u00fd si chce vybrat nov\u00fd v\u016fz a v\u00ed p\u0159esn\u011b, jakou m\u00e1 m\u00edt spot\u0159ebu, jak\u00fd m\u00e1 m\u00edt parkovac\u00ed syst\u00e9m a vzor na pneumatik\u00e1ch, ale nedefinuje, jak\u00e9 vlastnosti a k\u00a0jak\u00e9mu \u00fa\u010delu auto bude u\u017e\u00edvat. Nen\u00ed z\u0159ejm\u00e9, jestli bude v automobilu jezdit do pr\u00e1ce, nebo v n\u011bm bude vozit p\u00edsek.<\/p>\n

Zm\u011bna pomalu nast\u00e1v\u00e1<\/h3>\n

Postupn\u00e1 a pomal\u00e1 zm\u011bna u\u017e nast\u00e1v\u00e1. Na trhu u\u017e jsou k vid\u011bn\u00ed ve\u0159ejn\u00e1 v\u00fdb\u011brov\u00e1 \u0159\u00edzen\u00ed, kter\u00e9 sofistikovan\u00fdm zp\u016fsobem vyhodnocuj\u00ed prim\u00e1rn\u011b kvalitu popt\u00e1van\u00e9ho \u0159e\u0161en\u00ed (hodnot\u00edc\u00ed krit\u00e9rium 60 %) ve spojitosti s cenou (40 %) a tak\u00e9 ty, kter\u00e9 vylu\u010duj\u00ed p\u0159\u00edmo dle na\u0159\u00edzen\u00ed Rady EU \u010d. 833\/2014 z \u00fa\u010dasti ve ve\u0159ejn\u00e9m tendru subjekty, kter\u00e9 jsou vlastn\u011bny pr\u00e1vnickou osobou, subjektem nebo org\u00e1nem usazen\u00fdm v Rusk\u00e9 federaci, p\u0159\u00edpadn\u011b z v\u00edce ne\u017e 50 % ve ve\u0159ejn\u00e9m vlastnictv\u00ed \u010di pod ve\u0159ejnou kontrolou Ruska. A tato omezen\u00ed se net\u00fdkaj\u00ed jen dodavatel\u016f, ale i subdodavatel\u016f.<\/p>\n

Aby bezpe\u010dnostn\u00ed technologie plnily sv\u016fj prim\u00e1rn\u00ed \u00fa\u010del<\/h3>\n

SCANLOCK douf\u00e1, \u017ee N\u00e1rodn\u00ed \u00fa\u0159ad pro kybernetickou bezpe\u010dnost p\u0159iprav\u00ed z\u00e1kon tak, aby ochr\u00e1nil bezpe\u010dnost na\u0161eho st\u00e1tu, a to s d\u016frazem na ochranu moci z\u00e1konod\u00e1rn\u00e9, v\u00fdkonn\u00e9 a soudn\u00ed. Tak\u00e9 v\u011b\u0159\u00ed, \u017ee tento z\u00e1kon bude aplikov\u00e1n na kritickou infrastrukturu a podpo\u0159\u00ed technologie, kter\u00e9 jsou vyv\u00edjeny za \u00fa\u010delem zachov\u00e1n\u00ed bezpe\u010dnosti, kter\u00e9 neslou\u017e\u00ed n\u011bjak\u00e9 ideologi\u00ed nebo konkr\u00e9tn\u00edmu st\u00e1tu v jeho prosp\u011bch, a\u0165 u\u017e se jedn\u00e1 o prosp\u011bch finan\u010dn\u00ed, nebo informa\u010dn\u011b-bezpe\u010dnostn\u00ed.<\/p>\n

Pokud by tyto technologie neslou\u017eily k ochran\u011b zdrav\u00ed, majetku a du\u0161evn\u00edho vlastnictv\u00ed, nebo nap\u0159\u00edklad k\u00a0zaji\u0161t\u011bn\u00ed st\u00e1tn\u00ed bezpe\u010dnosti, pop\u00edr\u00e1 takov\u00e1 technologie jako celek sv\u016fj prim\u00e1rn\u00ed \u00fa\u010del.<\/p>\n

NDAA coby vzor<\/h3>\n

Jako vzor pro politiky by mohl poslou\u017eit feder\u00e1ln\u00ed z\u00e1kon Spojen\u00fdch st\u00e1t\u016f americk\u00fdch zn\u00e1m\u00fd jako National Defense Authorization Act, zkr\u00e1cen\u011b NDAA. T\u00e9to problematice se budeme v\u011bnovat n\u011bkdy p\u0159\u00ed\u0161t\u011b.<\/p>\n<\/div>\n<\/div>\n

\n
\n

Dal\u0161\u00ed zdroje informac\u00ed: iROZHLAS.cz<\/a>; Bloomberg.com<\/a>
Zpracoval: Ing. Ond\u0159ej Lindu\u0161ka (Scanlock CZ, spol. s\u00a0r.o.)<\/em><\/p>\n<\/div>\n<\/div>\n\n\n

\n
Pokus toto je pokus...<\/a><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Nejlevn\u011bj\u0161\u00ed vyhr\u00e1v\u00e1. Takto zjednodu\u0161en\u011b lze popsat mechanismus v\u00fdb\u011brov\u00e9ho \u0159\u00edzen\u00ed dodavatele kamer a bezpe\u010dnostn\u00edch syst\u00e9m\u016f pro \u010deskou strategickou infrastrukturu. Tak se stalo, \u017ee u vybran\u00fdch elektr\u00e1ren, nemocnic, \u00fa\u0159ad\u016f, ve m\u011bstech, v\u00a0dopravn\u00edch prost\u0159edc\u00edch dopravn\u00edch podnik\u016f, ale i na \u0161kol\u00e1ch dohl\u00ed\u017e\u00ed na bezpe\u010dnost kamery vyroben\u00e9 v \u010c\u00edn\u011b. To se ale m\u00e1 zm\u011bnit. N\u00e1rodn\u00ed \u00fa\u0159ad pro kybernetickou a informa\u010dn\u00ed […]<\/p>\n","protected":false},"author":1,"featured_media":105,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[46],"tags":[],"class_list":["post-112","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-clanky"],"_links":{"self":[{"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/posts\/112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/comments?post=112"}],"version-history":[{"count":6,"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/posts\/112\/revisions"}],"predecessor-version":[{"id":454,"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/posts\/112\/revisions\/454"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/media\/105"}],"wp:attachment":[{"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/media?parent=112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/categories?post=112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scanlock.cz\/dvanula\/wp-json\/wp\/v2\/tags?post=112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}