Translated with AI from the Russian original.

The standard regulates 25 processes throughout the entire product lifecycle.

The Federal Service for Technical and Export Control (FSTEC of Russia) has confirmed that the development processes at "Otkrytaya Mobilnaya Platforma" company comply with the national security standard.

The agency updated certificate No. 6, issued in 2025. The document certifies that the software creation procedures comply with the requirements of GOST R 56939-2024 "Information protection. Development of secure software. General requirements."

The audit covered the flagship products — the Aurora operating system and the Aurora Center software complex. OMP emphasized that successful certification confirms that the development of both solutions meets the highest data protection criteria. This guarantees customers the ability to use them in critical information infrastructures.

Project manager Sergey Yudin noted:

Obtaining the RBPO certificate is a significant event for our company. It confirms that our product creation processes are built in accordance with the best global security practices.

The standard regulates 25 processes throughout the entire product lifecycle: from personnel training and security planning to testing, vulnerability remediation, and technical support. The new status allows the company to independently assess security when making changes, which accelerates the release of updates.

Now on the front page

Articles

Why even a PC case should be branded

In Russian conditions, the popularity of PCs assembled by small local companies or in-house corporate IT departments continues to grow rapidly. Such solutions have historically been more popular in Russia than in other developed markets, but today new nuances have emerged in the segment's evolution, which we discussed with Karim LASKRI, Business Director of FSP Group in the CIS region.

News

Storage you can trust in the background: Basis SDS 2.3 released with scheduled diagnostics and an observer role

A storage system is the only infrastructure layer where an error cannot be “rolled back”: neither a reboot nor a configuration rollback will restore lost data. That is why users expect predictability from software-defined storage rather than just new features—ensuring background processes finish what they started, and administrators can see the cluster status not only “right now,” but also over time.