RSS
Логотип
Баннер в шапке 1
Баннер в шапке 2
Project

Investtorgbank passed an information security audit

Customers: Investtorgbank (Investment trade bank)

Moscow; Financial services, investments and auditing

Contractors: Andek
Product: Projects of external audit of IT and security (in tch PCI DSS and SUIB)

Project date: 2014/10

Investtorgbank passed in the fall of 2014 an information security audit. The Andek company was attracted to assessment of security, real and possible threats.

Specialists carried out the instrumental analysis of vulnerabilities of the nodes of network of bank available from the Internet. The virtual attacks for the purpose of gaining access to information systems of bank were emulated. In parallel with use of methods of social engineering an inspection of employees of bank on observance of rules of information security was carried out. The internal penetration test modulating wrongful acts of the employee of the bank having information on the used methods and means of protecting became the next stage of check.

Investtorgbank confirmed high degree of protection against unauthorized influence of malefactors outside and from the outside and also the high level of preparation and awareness of bank staff.

"The information security audit booked by specialists Andek allowed us not only to reveal threats and to assess their possible consequences, but also to accept precautionary counter-measures. Data security of clients, their means – a priority of bank", – Alexander Royko, the chairman of the board of Investtorgbank emphasized.