Interview of TAdviser with the technical director of the company of RT-Inform Vladimir Volchkov
Vladimir Volchkov, the technical director of RT-INFORM, in an interview of TAdviser told about project implementation "Service 360" which main objective was creation of uniform service IT infrastructure in scales of Rostec State corporation.
What event caused time of start of the project on creation of service IT infrastructure for Rostec state corporation - October, 2015? Its end in December, 2016 is how conditional?
Vladimir Volchkov: In the summer of 2015 RT-INFORM won an open competition and signed the contract for project implementation. Time of start was stated in the contract. End date is conditional, we continue to improve service IT infrastructure of Rostec State corporation.
What problems did face in the project progress?
Vladimir Volchkov: There were critical moments. The most critical was, probably, the fact that the Rostec State corporation has the raised social obligations therefore in the project progress we as much as possible used the Russian IT products and solutions. Many Russian vendors, whose solutions were applied and mutually integrated, for the first time met during implementation "Services 360".
So if it is possible to use the western solutions without restrictions, it would be easier?
Vladimir Volchkov: Certainly. The western products - rolled in the market there is a big practice of their operation, available experienced specialists. We had to do a lot of things from scratch – to integrate, develop, train. But now we have solutions which do not have analogs in the Russian IT market at the order. And our many colleagues – the Russian IT companies according to the results of the project grew by the head, we see it. Certain solution providers managed to release about 30 releases of the product - here how well we tested their products, helped to raise quality and to develop functionality.
Whether additional user training of business applications was required?
Vladimir Volchkov: Training was provided, and – in presentia, at special seminars during which specialists of RT-INFORM trained employees in work with new applications and services.
How painful was transition to new infrastructure for users? How the relationship with them was built up during the project?
Vladimir Volchkov: One of the main objectives facing us - ensuring painless transition to new service infrastructure. Therefore during the project we performed dense communication with business users, they could estimate each innovation. For users detailed instructions were prepared, necessary information on the renovations which are carried out within the project was provided. Profiling of users on start of the project was an important point that helped with number other to manage risks, loyalty and expectations. The user can expect that he as a result of renovation will receive on a table 3D - animation and when upon receives the closed circuit, the increased information security, will hardly be happy.
What total quantity of users?
Vladimir Volchkov: About 500.
What subsystems enter an area of responsibility "Services 360"?
Vladimir Volchkov: A system is live, developing. Including a broad spectrum, beginning from basic application services to solutions in the field of cybersecurity. In particular, services of management of printing, mobile devices and cybersecurity, the Servisdesk system, service of unified communications, the system of analytics and monitoring of IT, backup, control of security from information leaks (DLP system), virtual computing resources, multimedia equipment negotiation, virtual desktops, a wireless network and many other things.
On the project 30,000 hours left in total. If to draw the pie chart, having selected on it the main segments of works what "piece of pie" will be the biggest, what the smallest?
Vladimir Volchkov: The most part of time left on integration among themselves of the Russian IT systems, least of all time was required on deployment of VDI.
What hardware solutions were involved in the project course?
Vladimir Volchkov: We used as the Russian solutions (hardware-software DWH Damask steel), and Chinese from Huawei company.
About ten developers of different specialized products in the field of cybersecurity were involved to security of the created virtual space. What problems were solved on this direction? Whether their mutual integration was required?
Vladimir Volchkov: Staff of Rostec State corporation works in two circuits – closed (confidential) and open (free). In each workplace it is implemented in the form of two system units and the monitor with a possibility of switching. During the project of a lot of things it was thought up and implemented. For example, we thought up the concept of providing simultaneous operation to the user of an opportunity in both circuits. Developers - the Russian and western vendors – materialized this idea, having created the special thin client by means of whom the user can see on the monitor at the same time, but in two different windows, the application opened and closed circuits. Thus the user can work with personal mail - both free, and confidential. This solution was implemented based on several developments which were mutually integrated.
What problems during the Service 360 project were solved by specialists of Scientific and test institute of the systems of ensuring complex security (Scientific Research Institute SOKB)?
Vladimir Volchkov: The organizations of their access to the closed circuit and saturation by necessary content provided to Scientific Research Institute SOKB the MDM platform for control of corporate mobile devices (YotaPhone).
YotaPhone is the corporate standard of Rostec?
Vladimir Volchkov: No, just at the moment the staff of central office uses this mobile device owing to the fact that it is considered Russian, and even more owing to the fact that once his developers were a part of Rostec. In state corporation there is a long tradition to give advantages to own developments, promoting their promotion on the market.
The concept of BYOD practices in Rostec?
Vladimir Volchkov: No way. We understand that the State corporation works with confidential information. If we allowed an opportunity to use in the office purposes personal mobile for employees, then it should limit its functionality. Badly I imagine how I could prohibit the top head to install necessary applications on personal iPhone.
And I badly represent as take away from the CEO on an input in office personal mobile …
Vladimir Volchkov: It is also not taken away. It was initially really planned that employees hand over mobile on an input in office, but we refused it. All employees have at themselves two devices – personal and corporate. Personal trade on, corporate – in confidential network.
And it is controlled technically? At the level of the same MDM platform …
Vladimir Volchkov: Yes. Personal mobile devices, also, as well as personal computers, just are not connected to corporate network and it closes access to corporate information resources.
What products of the class Mobile Device Management competed on a preliminary stage? And why the choice was stopped on the MDM system of Scientific Research Institute SOKB?
Vladimir Volchkov: Several MDM platforms, both western, and Russian competed. The solution of Scientific Research Institute SOKB was the most suitable and easily built in our IT architecture.
What functionality of the SafePhone system was especially demanded and relevant within the project?
Vladimir Volchkov: One of the main tasks in the management plan mobile devices – a possibility of centralized operation by security policies, structure of applications, operational blocking or removal of data on the lost or stolen Corresponding Functionality phone in a system is available, and we use it that is called to the utmost.
Against what incidents of cybersecurity a system in addition to theft or loss of phone is ready to fight?
Vladimir Volchkov: Infection of the mobile device with the malware from an external source is possible. Therefore all applications installed on the certified mobile device are checked previously. There is a special shop of the tested software from where it is possible to download and install additional applications on corporate MU if it is required.
What restrictions are imposed by cybersecurity on corporate MU in terms of its use?
Vladimir Volchkov: Restrictions for use are defined by corporate policy. So if the policy provides switching off of the device at stay in negotiation, the management system of MU should provide such opportunity if the policy provides reading mail only from the corporate server, a system should provide it.
Do you scan the market of mobile devices regarding a possibility of use them as corporate? There were new Russian developments, in addition to YotaPhone?
Vladimir Volchkov: New Russian developments in this sphere did not appear. Products Apple in respect of cybersecurity proved to be from the worst party. Therefore now we actively test operating systems Tizen and Android and we have the finger on the pulse of the Russian developments.
What main objectives of the Service 360 project and whether it was fully succeeded to reach them were?
Vladimir Volchkov: When implementing the project we were faced by three important tasks. The first was connected with periodically arising need to quickly unroll a large number of information resources, having repeatedly increased available computing powers. On old IT infrastructure, in lack of virtualization, it was impossible to make it. The second task – need to increase the cybersecurity level. The third – primary use of the Russian products and technologies within import substitution policy. The first two tasks are solved completely, the third – partially, but we move in this direction, and we hope that we completely will leave in the nearest future from the non Russian software.
Whether it is going to replicate the best practices reached during the project on other enterprises of Rostec?
Vladimir Volchkov: Also it is planned, and is already implemented. In a stage of study there are two projects – deployment "Services 360" on all our representations (their about 20) and in one of holdings. In implementation phase - already mentioned project in Helicopters of Russia holding within which software is implemented exclusively Russian.
150