Minudobrenie completed reduction of the systems of personal data protection in compliance with requirements of regulators
Customers: Mineral fertilizers Contractors: Softline Product: Projects of external audit of IT and security (in tch PCI DSS and SUIB)Project date: 2014/04 - 2014/07
|
On August 5, 2014 the Softline company announced project completion on creation of a system of personal data protection for Minudobrenie company.
Project Tasks
The management of the enterprise customer was faced by a task: create an information security system according to requirements of the Federal law "About Personal Data" and methodical documents of authorized bodies of control and supervision in the specific sphere.
Based on the held tender the Softline company became the IT partner of the project.
Project Progress
At the initial stage of the project models of security risks of PDN are updated, works on identification and classification of personal data information systems are carried out, the engineering design on creation of a system of protection is developed, bench tests are performed. Then developed organizational and technical measures for security of personal data, implemented the certified means of protecting, events for conformity assessment of an information system, the processing PDN, requirements for information security are held.
Project Results
As a result of the performed works the management of the Minudobrenie enterprise received the necessary organizational and administrative documentation including orders, provisions, technical regulations and instructions for quality improvement of information security management regarding personal data protection.
"Creation of a system of protection without significant change of technology processing of confidential information and expansion of the existing staff of IT specialists of the company was one of project tasks. As a result the software and technical means of protection installed and configured by specialists of Softline optimum considered features of the organization and functioning of the existing IT infrastructure of the enterprise", - Dmitry Kovalyov, the sales manager of solutions of Softline in Voronezh noted.
"Project implementation allowed us to bring processing of personal data into accord to requirements of the modern legislation. The developed normative and methodical documentation is a basis for passing of checks from authorized supervisory authorities in the field of personal data. The project became an important stage on the way of development and improvement of processes of providing information security of the enterprise", - Ahmet Alimkhanov, the director of protection of business – the deputy CEO of JSC Minudobrenie told.
As a result enterprise information systems were brought into accord to requirements of the current legislation in the field of protection of PDN.