Customers: UniCredit Moscow; Financial services, investments and audit Contractors: ITProtect Product: Projects of external audit of IT and security (in tch PCI DSS and SUIB)Project date: 2014/04 - 2014/07
|
On July 25, 2014 the ITProtect company announced project completion of audit of payment system UniCredit Bank Ltd on compliance to requirements of the federal legislation and to regulating documents of the Bank of Russia.
Project Progress
Project implementation consisted of several stages. Conformity assessment of the taken measures and processes to requirements of Provision of the Bank of Russia No. 382-P "About requirements to ensuring data protection at implementation of money transfers" and also conformity assessments of payment processes to requirements of FZ-161 of the "On the National Payment System" is carried out.
Project Results
"An important task for bank was in a short time to follow the instruction of the Central Bank of Russia of June 5, 2013 No. 3007-U on making changes in Provision of the Bank of Russia of June 9, 2012 N 382-P. the ITProtect company which offered the most complete volume of work on the conditions, most profitable to bank, was To perform work selected, – Ivan Marshev, the head of department of information security of UniCredit Bank Ltd noted. – High-quality and fast work of the contractor allowed us to provide in required terms compliance of bank new normative with requirements, at the same time minimum distracting employees of the bank from the main business processes".
"Compliance to standards and requirements of the Bank of Russia and, as a result, risk reduction – one of the key areas of work of our company. Our specialists accumulate considerable experience of implementation of similar projects, – Dmitry Novikov, the technical director of ITProtect Ltd told. – Based on audit there is a wish to note that the bank showed the high level of the organization of business processes from a position of data protection and compliance to requirements of the Central Bank. It can be considered as powerful competitive advantage of UniCredit Bank Ltd, in a situation when information leaks from payment systems meet even more often".