RSS
Логотип
Баннер в шапке 1
Баннер в шапке 2
Project

"The international construction bank" completed audit of the systems of data protection

Customers: International Construction Bank (ICB)

Financial services, investments and audit

Contractors: Leta IT-company
Product: Projects of external audit of IT and security (in tch PCI DSS and SUIB)

Project date: 2013/11  - 2014/03

Content

On March 31, 2014 the LETA company announced completion of conformity assessment of a system of information security support of the International construction bank (CB MSB) to requirements of regulating documents about data protection in the national payment system (NPS).

Project Tasks

Project objective - reduction of a system of information security support of CB MSB in compliance with Provision of the Bank of Russia of June 9, 2012 No. 382-P "About requirements to ensuring data protection at implementation of money transfers and about a procedure the Bank of Russia of control of observance of requirements to ensuring data protection at implementation of money transfers".

"The international construction bank is a subject of national payment system, and we need to consider the considerable number of the regulating documents on data protection developed within creation of NPS, – Elena Inozemtseva, the chairman of the board of CB MSB noted. – For project implementation on reduction of our SOIB in compliance to all requirements of the legislation we decided to address experts from the LETA company having wide experience of rendering services in information security field".

Project Progress

Work on the project was continued four months and consisted of several stages during which the assessment of the current level of compliance to requirements to ensuring data protection at implementation of money transfers, preparation of recommendations about elimination of the revealed violations, development of necessary organizational and administrative documents and final conformity assessment is carried out.

Project Results

Upon completion of the project the customer received the report with results of conformity assessment when which carrying out as the evidence of documentation of procedures of information security support the organizational and administrative documents developed by LETA company were considered.

"Mass use of payment services contributes not only to the development of the credit and financial sphere, but also growth of level of threats of information security for the organizations providing financial services. For reduction of risk of security subjects NPS should follow attentively all rules and requirements determined by the legislation and regulators, – Alexander Malyavkin, the CEO of LETA told. – The LETA company of one of the first in the Russian market began to render services in data protection in NPS, and our specialists accumulate considerable experience of projects implementation in the organizations of banking sector. We are glad that the International construction bank selected us as experts for project implementation in ensuring compliance of information security of bank to requirements of regulating documents".