The Novosibirsk branch of "Eye microsurgery" implemented the system of personal data protection
Customers: Microsurgery of an eye of MNTK of S.N. Fedorov Product: Electronic lock Sable Second product: VGate Third product: RedCheck Project date: 2017/11 - 2018/04
|
On June 5, 2018 the Akstel-Bezopasnost company announced end of system implementation of personal data protection in the FGAU Novosibirsk branch "NMITs "MNTK "Eye Microsurgery" of the Academician S.N. Fyodorov" of the Russian Ministry of Health.
Prerequisites of the Project
Considerable extent of process automation in the ophthalmologic center allows to exercise control and medical control of the electronic clinical record and, at the same time, imposes high requirements to the level of information security, according to requirements of the legislation.
Project Progress
The Akstel-Bezopasnost company was selected from an analysis result of the market of service providers in the field of information security and holding a competitive procedure as the partner of the project. The Axoft company acted as the IT distributor of the project.
In the project progress specialists of the partner booked internal audit of information infrastructure of personal data. Further – testing for the penetration which took place in six stages is implemented: testing of perimeter of network automatic means, in the manual mode, method of "a black box", social engineering, pentest of the website, the analysis of data retrieveds. To the customer the report was submitted, work on correlation of levels of personal data with requirements of the Russian legislation is carried out, the project of creation of information security systems under the client's infrastructure is prepared, approved and implemented.
The solutions necessary for project implementation were defined, proceeding from their compliance to requirements of regulators, namely – existence of the existing certificates and the checked reliability of products. Software and hardware products of the solution "Code of security" – Sable electronic lock means of protecting of platforms were purchased virtualizations vGate; scanner security RedCheck from "AltexSoft", etc. Joint efforts of a team of IT specialists of the client and experts of the partner made changes in the existing structure of network.
During the project specialists of "Akstel-Bezopasnost" faced a technical issue of compatibility of the implemented products with the antivirus which is used in the company and elements of infrastructure of the customer. The matter was resolved thanks to harmonious work of client representatives and the contractor and also using technical support specialists of vendor of the software.
Project Results
As a result of project implementation the end-to-end system of data protection ISPDN conforming to requirements of the Russian legislation, including the act of the Russian Federation "About Personal Data" No. 152-FZ is constructed, the overall level of information security of the organization is raised.
"In an analysis result specialists of the contractor of our information systems processing personal data of patients and personnel revealed and eliminated essential defects. As the result – is raised the overall level of information security of clinic, the requirements of the legislation for personal data protection are fulfilled". Vitaly Shakhov, head of department of medical information technologies of the FGAU Novosibirsk branch "NMITs "MNTK "Eye Microsurgery" of the Academician S.N. Fyodorov" of the Russian Ministry of Health |