The use of cloud computing to ensure interaction between the state and citizens allows to speed up information interaction, to realize state services, to reduce the costs of providing such interaction, but at the same time this interaction raises important questions about the reliability of the cloud provider and security of interaction. Providers of the cloud can be both public authorities and private organizations. In the event that the cloud provider is a government agency, it can be assumed that all the requirements for security will be met. However, if the cloud provider is a private person, then we cannot be sure of security, if these requirements for security are not mandatory. It should be noted that Russian legislation does not require the mandatory application of information security standards. In this regard, the security of stored information in the clouds and its legislative support, the responsibility of providers providing cloud access services are very significant for the use of this technology in Russia.

The chapter presents a study on ensuring the information security of the Russian Federation in the field of the internet of things (IoT), an analysis of Russian state policy in this field and methods for its implementation in terms of technical and legal regulation, and the directions of state development in field creating a system of regulation of relations in the field of IoT. To present the general picture of the state's opposition to the risks and threats arising from the use of the IoT, a comparison is made of the risks and threats used by the FSTEC of Russia and ENISA. The authors disclose Russian approaches to ensuring information security, reflected in state strategic documents, including the strategy adopted in 2015 in the field of ensuring information security by switching to their own information technologies. In conclusion, recommendations are made for government bodies and users to ensure integrated information security.