DeviceLock Endpoint DLP Suite prevented leak of confidential information from "RSHB Asset management"

The RSHB Asset Management limited liability company is the management company performing since 2012 the securities management and licenses for activities on management of investment funds, mutual investment funds and non-state pension funds. The amount of assets under control of the company exceeds 15 billion rubles, and the company is included into TOP of 5 largest Russian management companies on the amount of funds of corporate clients for the end 3 quarters 2013.

The concept of information security of RSHB Upravleniye Aktivami LLC represents the frame of reference which is officially accepted by the management on a problem of information security support. Strategy regarding counteraction to threats in the information sphere consists in the balanced use of protective measures of the different nature: from measures at the level of business, to the specialized measures of information security based on risks assessment of information security. Among the means applied to achievement of the set strategy of information security the software package DeviceLock Endpoint DLP Suite is used. The decision on commissioning of the DeviceLock system in RSHB Upravleniye Aktivami LLC relied on experience of long-term successful operation of a DLP system in parent organization.

'For the purpose of a broad research of opportunities DeviceLock and their applicability in the conditions of infrastructure of the company it was decided to carry out "acceptance tests" within one of key divisions. The staff of department of IT quickly enough unrolled a server part for the centralized collecting of magazines of audit and shadow copying, set an agency part on computers of staff of the selected division. Within a week we made different experiments with settings, different DLP politicians set and, in particular, investigated possibilities of a subsystem of event recording in DeviceLock. Product capabilities made a good impression, and a system was left in the set status with the included recording mode for several weeks.' - Smykov Alexander, the Head of information technology of RSHB Upravleniye Aktivami LLC tells.

'Almost before the end of the period of test operation it became clear that the head of department in whom passed DeviceLock test leaves. Verification of magazines of shadow copying on this employee showed that on the removable medium where usually there were harmless house documents, also several confidential documents appeared. The company management was without delay informed on this incident of security and adequate measures are taken. Thus, just test operation already prevented date leak of the company.' - Vladimir Vladimirovich Malkhanov, the CEO of RSHB Upravleniye Aktivami LLC concludes. Asset management"