Bashneft purchased more than 10 thousand licenses Zecurion DLP

In November, 2012 the Zecurion company announced implementation of a DLP system in the Bashneft joint stock oil company. For the purpose of a scope of the existing corporate information systems of JSC ANC Bashneft purchased more than 10 thousand licenses Zgate and Zlock with a product scaling option at development of the company.

Within general strategy of increase in information security the management of JSC ANC Bashneft made the decision on implementation of a DLP system and in the middle of 2011 announced an open tender. The task set by company management – to provide the sufficient level of information security from internal threats in scales of all company, could be solved only at accomplishment of such requirements to participants of the tender as reliability, performance and scalability of technical solution. Based on the held testing and the analysis of characteristics of software products of several Russian and foreign developers the management of Bashneft made a choice for benefit of the Zecurion DLP system.

"We were faced by very difficult task — among a set enough serious and competitive DLP solutions to select the product meeting the requirements of the business customer regarding ensuring the confidential information protection circulating in corporate information systems. We knew that we in implementation process of the project will face the difficulties dictated by realities. First, it is very big geographically-distributed structure of information infrastructure of the company, secondly, a huge variety of the hardware-software solutions implemented on different technical base and software platforms, thirdly, rather difficult and detailed security policy which is designed to provide including a DLP system. At the same time it is necessary to consider that implementation of the DLP solution is an infrastructure IT project, and here it is impossible to assume that this process caused damage to stability of work of the main IT services, had negative effect on the continuity of the existing business processes of the company" — the head of department of information security of JSC ANC Bashneft Romanov Mikhail comments.

The project on implementation of Zecurion DLP in ANC Bashneft started in January, 2012 and passed in several stages. At first audit of an information structure was booked and crucial data which should be protected using DLP are defined. Then the pilot zone at several hundred workstations was started. After refining the politician and debuggings a system was scaled on all volume of corporate network of the company.

Deployment of Zecurion DLP proceeded on all perimeter of network at once: the modules Zgate for control of network channels and Zlock for protection of endpoints were at the same time installed. Thus the comprehensive protection from leaks of confidential information was provided with means of Zecurion DLP.

Zecurion Zgate allows to control movement of confidential information as in a corporate information system, and its transfer out of limits of a controlled zone. Thereby the possibility of leak of confidential information through corporate mail, social networks, forums, Internet pagers, web mail, FTP resources and any other network data transmission channels is minimized. Zecurion Zlock prevents leaks of confidential information via the peripheral devices connected via USB interfaces, LPT, COM, IrDA, PCMCIA, IEEE 1394 and also the built-in devices: network interface cards, modems, Bluetooth, Wi-Fi, CD/DVD disk drives. Zlock differentiates access to drives and printers, allows to control file transactions. Information intercepted by Zecurion DLP is brought in archive for the subsequent analysis of actions of employees and investigation of possible incidents of information security.

"Implementation of Zecurion DLP in "Bashneft' became for us one of the most interesting and difficult projects — Belyavsky Alexander, the commercial director of Zecurion says. — The most important stage of implementation, development the politician and system operation setup, our specialists together with employees of the customer tried to implement in his territory in most short time. Now, when all system in general is started and debugged, we are sure that Zecurion DLP successfully protects information from leaks. In spite of the fact that each project in an Enterprise-segment is unique, the experience gained within this implementation will help us with implementation of other large projects in the oil and gas industry".