The pilot project on personal data protection in SOSh No. 5 of Solnechnogorsk is complete

The ELVIS-PLUS company completed in the fall of 2014 a pilot project on personal data protection (PDN) at one of schools of the Solnechnogorsk municipal district of the Moscow region. This project was initiated by the Ministry of Education of the Moscow region and NP Union of Defenders of Information for the purpose of creation of available standard set of the technical and organizational measures of protection suitable for replication in other educational institutions of the Moscow region and PDN which are completely meeting all requirements of the legislation in the field of protection. All technical solutions used in the project were implemented at the expense of ELVIS-PLUS company.

The Ministry of Education of MO in the spring of 2014 defined structure of works within this pilot project: carrying out inspection of a status of security of personal data, preparation of a set of organizational and administrative documentation, implementation of means of information security, including carrying out tests, training of employees and demonstration of system operation of personal data protection.

Were carried out by ELVIS-PLUS company: collecting of initial data, determination of level of security of PDN, modeling of threats; development of technical solution (including development of project and operational documentation on the created system of protection of PDN); purchase and implementation of information security systems. In this project only domestic solutions were applied: the systems of access isolation and protection against unauthorized access, means of protecting from a malicious code, means of protecting of data transmission channels; project development of the organizational and administrative documentation regulating issues of processing and protection of PDN; balancing and commissioning on input of a system of protection of PDN in action; acceptance of a system in operation, document approval, release of orders by the staff of schools.

As a result of execution of works ISPDN MKOU SOSH No. 5 is at the moment completely corresponding to the current Russian legislation in the field of protection of PDN.

"The problem of personal data protection in educational institutions is relevant more than ever. The main task of educational institution — to teach, but not to protect information, and from here absence or insufficient competence of the specialists who are responsible for security of personal data and work in full and also limited financial provision of this sphere. Therefore it is quite clear that execution of works on protection of PDN requires attraction of the third parties capable to carry out works not only it is qualitative, but also with minimum necessary costs. Organizers of works allowed us not only to protect personal data at one single Moscow region school, but also gave the chance to develop, taking into account modern school realities, and to test in practice the solution, available, standard for educational institutions, which replication, in our opinion, will allow to save in the long term considerable means of regional and municipal budgets. I hope that our cooperation with the Ministry of Education of the Moscow region and NP Soyuz zashchitnikov informatsii will be continued, and we will be able to solve further together this socially important problem" — Akimov Sergey, the advisor to director general of JSC ELVIS-PLUS commented.

"This pilot project — only the first step on the way to security of personal data in educational institutions of the Solnechnogorsk district and the Moscow region in general. The first complexity in this process — the amount of the protected information which is quite big. The second — the importance of the protected data. It is information on minor citizens and their parents. And we shall consider also their interests in this question. Thanks to the advisory help which to us is rendered by specialists of ELVIS-PLUS company we not only will protect personal data of our school students, but also we will increase awareness of employees of an education system in questions of information security" — Timokhin Igor, the head of department of data protection noted.