The project on personal data protection (PDN) in United Aircraft Corporation

The LETA company announced end of the complex project on personal data protection (PDN) in United Aircraft Corporation (JSC OAK) open joint stock company.

Project objectives were inspection of technology processing of personal data of the company regarding compliance to requirements of the legislation of the Russian Federation in the field of personal data protection and a system design of protection of PDN according to requirements of FSTEC of Russia and FSB of Russia.

The project included a full stroke of design and creation of a system of personal data protection (SZPDN). The implemented system completely conforms to requirements of Federal law No. 152-FZ, bylaws and other elements of the existing regulatory base in the field of protection of PDN.

Works on creation of a system of protection of PDN in JSC OAK were conducted on the typified scheme repeatedly approved by LETA company in projects of similar scale.

At the first stage specialists of LETA carried out the analysis of the existing documents and processes on IT and cybersecurity, and then developed the plan of the analysis of processing of personal data. The next stage was completely devoted to inspection of these processes. At the third stage the complex analysis of collected information was carried out and the necessary packet of reporting documentation which was sent in all subsidiaries and affiliates of JSC OAK for use in work on protection of PDN is developed. Also in a work progress at the third stage specialists of LETA and OAK created engineering design SZPDN and necessary organizational and administrative documentation. At the fourth and fifth stages implementation of technical and organizational measures was carried out.

During the project the certified means on data protection from unauthorized access of Dallas Lock (development of Konfident LLC) were implemented. Besides, in ISPDN a number of the technical means which are already available for the company was connected.

All works were carried out in close contact with specialists in information security and information technologies of JSC OAK.

"Compliance to rules of law – the mandatory and natural requirement to our organization, – Antonov Vadim, the deputy security officer on information security of JSC OAK says. – Today the perspective of personal data protection comes out on top. Timely to create the corresponding system, it was extremely important to us to estimate in a complex our rather complex information system and organizational procedures from positions of the existing regulatory base. Also it was necessary to work options and to understand in what degree protection of PDN will affect different business processes, and on the basis of data retrieveds jointly to design and implement ISPDN. During the project the LETA company once again confirmed the high qualification in the field of protection of PDN".