iTPROTECT Info protection

iTPROTECT (InfoProtection ITProtect) is a specialized integrator in the field of corporate information protection, part of the iTPROTECT GROUP of companies. ITProtect has a project portfolio in areas such as protection against internal threats and fraud, collection and analysis of security events that certify centers, protection of mobile devices and databases, user control, etc.

Performance indicators

2022: Year-end revenue growth of 98 %

iTPROTECT summed up 2022 financial. In addition to revenue growth, the company singled out the most interested INFORMATION SECURITY industries in and most popular solution classes. The company announced this on September 14, 2023.

As in general for the information security industry, the past year has become a year of growth for iTPROTECT. Thus, the company recorded revenue growth by 98% according to the results of the calendar and 70.5% according to the results of the financial year, in comparison with similar indicators in 2021. Similarly, the share of services and services of the company increased significantly - by 57% compared to 2021 financial year. These indicators became a record for the integrator. The growth of indicators is primarily associated with the massive transition of public and private organizations to Russian solutions, as well as the general growth of cyber maturity among companies.

iTPROTECT also analyzed the players of which sectors of the economy were most interested in information security solutions for 2022. The leaders were the public sector (31%), the financial sector (22%), the energy industry (13%) and mechanical engineering (8%).

In 2022, most Russian organizations needed to strengthen their defense against cyber threats. For example, someone had to strengthen their network protection, but most replaced previous foreign products that had ceased to be updated due to the departure of foreign vendors from Russia. At the beginning of 2022, we worked with Russian information security products for more than 5 years, and used all our expertise to help customers create solutions to protect against all potential actions of attackers, "commented Andrei Mishukov, CEO of iTPROTECT.

The main reasons for the leadership of the public sector among other industries in the company are the update of legislation, in particular in the field of the protection of personal information (ISDS) and state information systems (GIS), the actual needs for import substitution, as well as the situational need to extend software licenses. So, in 2022, iTPROTECT implemented projects for a number of state organizations on import substitution of NGFW and DLP antivirus protection tools, as well as the introduction of cryptographic protection tools. One of the landmark projects in this area was the certification of 2 key systems of the Ministry of the Russian Federation for the development of the Far East and the Arctic for cybersecurity requirements in relation to ISDS, GIS, critical information infrastructure (CII) facilities and trade secrets. In preparation for the qualification, the iTPROTECT team has implemented more than 370 encryption modules to protect hosts with access to up to 2 systems serving to digitalize the main business processes and manage the organization's IT services.

In terms of solution classes, the big growth in 2022 was in the direction of antivirus protection (Endpoint Security), which grew almost 4.5 times compared to 2021, primarily due to the extension of licenses and expansion to new systems. The largest contract in this direction was the extension of more than 170,000 Kaspersky Endpoint Security licenses to one of the largest FEIs.

vulnerabilities Vulnerability management (VM) solutions and services were also popular. This direction showed an increase of almost 4.7 times and took a share in revenue - 11.03%. Here, the main reasons for the growth were the construction of vulnerability search processes, the need for asset inventory, as well as the need for scanning within the framework of regulatory requirements (in the field of personal data and GIS). One of the demonstration projects was the introduction of a vulnerability scanning system that removes information from several hundred sources in one of the large ones. Russian banks The system is built on the basis of a new class scanner, which allows not only to identify vulnerabilities, but also to control the process of eliminating them.

Also, the direction of access control systems of privileged users (PAM) increased by 36%, with a revenue share of 7.91%. First of all, there is a noticeable demand in areas with a large volume outsourcing in the area IT where it is important to control access to critical systems. A good example is the implementation of the PAM system in another major Russian one. In bank the financial sector, solutions of this class are especially relevant, because banks interact with a large number of outsourcing resources, and it is important to control their access. This mid-scale project is up to 100 simultaneous users, but quite indicative from the point of view of a set of services - connecting target resources, integrating PAM with SIEM the -system as a source of information security events, creating a single base passwords , etc.

The direction of protection systems against targeted attacks (AntiAPT), which took a share of revenue of 6.74% and more than doubled, also received noticeable growth. The reason is the growth of customer cyber maturity. One of the largest projects for iTPROTECT was the large-scale phased implementation of such a system in a large machine-building holding with 11 branches throughout Russia, where even during piloting, a new solution helped to detect and neutralize several dozen attacks.

The direction of multifactor authentication (MFA) also increased by 75%, due to the continuing post-covid tendency to increase the level of protection for remote work and import substitution. One of the iTPROTECT projects in this area was the introduction of a two-factor authentication system at Otkritie NPF, designed to simultaneously work up to 550 employees in two offices. Protection uses a complex of 4 factors - SMS, PUSH, one-time passwords in mobile. application and tokens.

Finally, the direction of the latest generation firewalls (NGFW) increased 2.5 times, taking a revenue share of 6.34%. Here, the main reason was the import substitution process and the active introduction of domestic solutions instead of foreign ones that have ceased to be updated. A good example of such projects is the replacement of a foreign NGFW with a Russian one in one of the regional branches of Mir Business Bank, carried out in order to ensure secure communication between the branch and the head office, where the same solution was already implemented earlier. The iTPROTECT specialists configured and installed the solution on the perimeter so that it solves the tasks of the firewall and web proxy and opens a VPN channel between offices.

In addition to NGFW, it grew by 20.4% and the total share of solutions and services in the field of network security, including solutions for protecting communication channels (VPN/CIPF) and publishing web applications (Web application firewall, WAF), Internet access control ( web proxy), network security policy management (NSPM), network traffic analysis (NTA), network sandboxes and AntiDDoS.

Among the main reasons for the introduction of network security solutions are the import substitution of information security products (within the framework of the requirements of the law, to reduce the cost of technical support or add new functionality), the need to comply with the requirements of corporate security policies or external standards, the implementation of remote access of employees to systems, reducing the cost of managing information security, improving the effectiveness of protection against attacks or the speed of response to information security events.

In general, 2022 showed a high growth in the development rate of the Russian information security market, and the acceleration of import substitution in Russian organizations, both in the public sector and in commercial structures. This positive trend will continue in 2023, since the import substitution process is not fast and requires investments, both financial and labor costs, Mishukov added.

History

2023: TAdviser interview with technical director Maxim Golovlev

The Russian information security market after the events of 2022 quickly adapted to the new reality. Last year, many companies focused on replacing NGFW, SIEM, PAM, AntiAPT and other systems from foreign vendors. At the same time, domestic vendors and integrators expanded their expertise, offering customers migration plans for Russian solutions. Maxim Golovlev, technical director of iTPROTECT, a Russian integrator in the field of information security, spoke about this in an interview with TAdviser. Read more here.

2022: iTProtect Brand Merger

The companies of the ITProtect group are united under a common brand - iTPROTECT. The company announced this on January 13, 2021.

The need to use a common brand is dictated by business development and updating the company's strategy aimed at developing a portfolio of solutions and own services. The brand unites 3 legal entities - ITProtect JSC, AITIPI Services LLC and the management company AITIPROTEKT GROUP LLC.

With the name change, all elements of the brand identity change, which will happen during the first quarter of 2022.

Rebranding for iTPROTECT is an important step that opens up the next stage of development in accordance with the company's updated strategy. Under this brand, we will continue to work on increasing recognition and expanding the portfolio of information security services. The company's slogan - "We protect, ahead of threats" - emphasizes our ability to quickly respond to emerging types of threats, market trends and legislative changes, - commented Svetlana Chuvaeva, Marketing Director of iTPROTECT.

As of January 2022, iTPROTECT offers its customers more than 40 types of solutions and services that cover the main areas of information security. The portfolio of solutions and services continuously develops in accordance with the needs of customers and regularly emerging threats in the field of information security. For example, at the end of 2021, it was replenished with a service for analyzing the security of the IT infrastructure with payment for the result.

2021

Logo "ITProtect" for December 2021

2019: Agreement with Avtomatika on joint development and implementation of information security solutions

Concern "Automatics" Rostec On July 1, 2019, state corporations and the ITProtect company announced the conclusion of an agreement on a long-term strategic partnership within the framework of a national project. Within "Digital Economy" the framework of the agreement, cooperation is also planned in other strategically important and high-tech projects of a federal scale. Projects on protection,, state information systems automated process control systems facilities critical information infrastructure and will personal data Russians be worked out by the parties jointly within the framework of approved working groups. More. here

2017

Checkmarx Highest Partner Status

ITProtect received the highest partner status of Checkmarx - Platinum - based on the results of the implementation of large-scale projects for the implementation of the statistical code analysis system over the past 12 months.

Brand Update

logo until May 2017

On May 26, 2017, the company announced a corporate style update, with a change of logo.

Register of expert organizations of the Federal Tax Service of Russia

The company ITProtect included in the register of expert organizations of the Federal Tax Service of Russia in May 2017. This status will allow ITProtect to provide certification services for cash register models or technical means of the fiscal data operator for compliance with the requirements of Russian legislation.

Order of the Federal Tax Service of Russia of 04.04.2017 No. ED-7-20/286 @ confirms the inclusion of Infozashchita JSC in the register of expert organizations of the Federal Tax Service of Russia. As a result, the ITProtect received the right to independently organize and conduct an examination of models of cash registers and technical means of the fiscal data operator for compliance with the requirements of Federal Law No. 54-FZ of May 22, 2003 (revision of July 03, 2016) "On the use of cash registers in cash settlements and (or) settlements using electronic means of payment."

Inclusion in the register of the Federal Tax Service was made after the ITProtect fulfilled a number of requirements, including the presence of certified experts, production bases and net assets. In the spring of 2017, only 6 organizations in Russia meet these criteria.

2014

According to information for 2014, ITProtect JSC is a specialized integrator implementing comprehensive projects in the field of information security. The main focus of the company's activities falls on services. This is the introduction of products of leading vendors, consulting in the field of information security, technical support, training. Among the competitive advantages of the company: tight deadlines for the implementation of projects, quality control, competitive prices.

2013

Within the framework of the VI Medical Forum, held on May 29-31, 2013, ITProtect presented the concept of a project to protect personal data in the clinic. Special attention was paid to the following important aspects: ways to reduce financial and organizational costs for the implementation of a system for the protection of personal data in the clinic, to eliminate organizational and methodological, technical factors that contribute to corruption during inspections by authorized organizations. In addition, an algorithm for introducing a system for protecting personal data in an organization and features for its implementation in medical clinics was also presented. Ensuring compliance with the requirements of Russian legislation in the field of personal data is now becoming a serious issue for companies of any scale, especially for medical organizations. Therefore, a special place in the presentation was paid to responsibility for violation of the legislation on personal data, the regulatory and legal framework governing the work with personal data, as well as the regulations for the actions of officials in the implementation of control and supervisory measures.