Стандартизація інформаційної безпеки хмарних сервісів

The article considers the standardization of information security of cloud services. The relevance is characterized by the need to study standards that determine the organizational, technical and programmatic aspects of information security. The purpose of the article is to form a scientific understanding of the nature and features of standardization of technical regulation and practical implementation of cloud services. The research methodology includes general scientific methods of scientific knowledge, such as analysis, synthesis, generalization, logical method, induction, deduction, classification, analogy; private scientific and special methods: comparative legal, formal legal and other research methods. The object of the study is legal relations that arise during the standardization of information security of cloud services. The subject of the article is the norms of the legislation of Ukraine and a number of foreign states that regulate relations regarding the standardization of information security of cloud services. It is noted that cloud technologies are an organizational model of remote use of elements of information systems, in connection with which the study of information security of cloud services covers the relations of ensuring confidentiality, integrity of information located in cloud storages. The object of standardization of information security of cloud services is characterized by complexity, includes technological and technical parameters of information system security (information technologies, technical means and data). Standardization involves the adoption of a strategy for legal regulation of relations that are formed during the use of cloud technologies in the context of ensuring information security. International cooperation in the field of standardization of information security of cloud services involves the development of unity of approaches to regulating confidentiality, identification, and access to data. The standards establish requirements for compliance with precautionary measures when using a cloud information system (ensuring the confidentiality of passwords, preventing unauthorized access to electronic computing facilities, paying attention to information access settings).