Customers: Lukoil-Inform
Contractors: Informzashita Product: Projects of external audit of IT and security (in tch PCI DSS and SUIB)Project date: 2014/03 - 2014/11
|
On December 17, 2014, Moscow. Experts of Informzashita developed technical requirements on information security support for LUKOIL-INFORM LLC which will allow to automate a considerable part of tasks of the services IT and cybersecurity connected with carrying out internal audit of security of infrastructure. Employees of data of divisions received the ready tools on audit and setup of different platforms developed on the basis of risks assessment of business and compliance with the best world practices.
In addition to development of new security requirements, already available change management processes, by vulnerabilities and the analysis of security were considerably finished. By means of the configured control of compliance to the set requirements, services IT and cybersecurity will be able to interact according to accurately certain regulations answering to strategic business objectives now. Standards are developed for the systems of SAP, Oracle, Linux, Windows 2012 Server, Active Directory and many others. Also requirements for architecture of a local computer network, routing protocols and the equipment Cisco were significantly finished.
"For short term we developed a necessary set of requirements and proved their need, having accurately defined various risks of their non-performance, so and their business impact in general, – Hlapov Denis, the head of department of consulting of Informzashita company tells about project results. – Services IT and cybersecurity do not need to look for every time on the Internet information on setup of this or that system now: special software will do it in the automatic mode, and all necessary actions can be found in documentation which is specially developed for this purpose".