In most cases, commercial companies can confirm their compliance with the requirements of Federal Law No. 152-FZ by presenting an effectiveness assessment report without certification testing. Companies that have the appropriate competencies can do this themselves.
Certification is mandatory for state and municipal systems. Commercial entities may require certification, for example, if they are connecting to state systems or need to comply with contract requirements (in these cases, certification is carried out on a voluntary basis). The certification is carried out by an FSTEC licensee and imposes a number of additional restrictions on the information system.