The largest suburban carrier of Russia started the large-scale cybersecurity project

"The central suburban passenger company" (Central PPK) which share in suburban transportations Moscow railway node makes more than 80% and across Russia - 60%, planned creation of a system of information security support and reduction of the IT systems which are available for it in compliance with the current legislation about data protection for 2014-2015.

As it appears from the project documentation, works will affect central office and stopping points of suburban passenger traffic of the company. In its framework it is going to carry out the assessment of the current measures for providing Information Security of information of limited access of the company, to develop the internal regulating documentation on providing Information Security and to design an information security system of limited access for IT systems of standard objects of the company. It is also going to construct the system of personal data protection of passengers and to certify the IT systems processing them on compliance to security requirements of information. In addition, Central PPK expects to create certification center for integration of the electronic signature into the infrastructure.

For the system of personal data protection, in particular, standard solutions of the IT systems processing personal data on standard objects, neutralized relevant security risks, said in the project documentation should be designed. This system is going to be unrolled by June, 2015, and to carry out certification of IT systems of personal data – no later than December, 2015.

"The central PPK" really will protect personal data of the passengers

The information security tools offered for creation of a system of providing Information Security of Central PPK should be certified in the systems of certification of information security tools of FSTEC, and for means of cryptographic protection - in FSB.

The separate project in Central PPK will carry out creation of an end-to-end system of data protection for the system of sale of suburban tickets and control of pass of passengers. The last provides execution of travel documents on different types of the figurative and stationary cash equipment, including terminals of agents and Internet sale, control of travel documents on the platform and during implementation of a trip and also accounting and data processing about transportations.

The cybersecurity solution for protection of this system will include subsystems of protection against unauthorized access,cryptographic protection,firewalling, detection of invasions, the analysis of security and a subsystem of antivirus protection. Software of the basic information security tools which are composition should conform to requirements of regulating documents of FSTEC and FSB, it is specified in technical project requirements.

It is going unroll the cybersecurity solution for data protection of a system of sale of suburban tickets and control of pass of passengers by the end of 2014 then – to carry out its certification on compliance to requirements for security of information. In total for both projects "Central PPK" it is ready to pay about 345 million rubles.