KSZ MyOffice MyOffice Platform Security Tool

The security tool of the MyOffice platform ("KSZ MyOffice") — the product for protection against unauthorized access which is built in products of MyOffice for ensuring identification and authentication of users, management by their data access of the company and registration of events of security.

2018

Passing of inspection control to FSTEC of Russia

On November 26, 2018 the New cloud technologies company announced that the next version of the product "MyOffice Platform Security Tool" underwent inspection control in FSTEC of Russia and confirmed compliance to requirements of regulating documents. According to the company, updating is carried out for the purpose of ensuring compatibility with the next versions of the products "MyOffice".

KSZ MyOffice is the product for protection against unauthorized access which is built in cloud solutions of MyOffice.

Basic functions of KSZ MyOffice:

• provides protection of login at the expense of the strengthened authentication of users,
• gives to opportunity for control of leaks and channels of distribution of the protected information and group monitoring of work,
• provides control of wrong actions of users for input and information transfer and warning of users of wrong actions.
• The FSTEC certificate of Russia No. 3763 works till June 23, 2020 and confirms that KSZ MyOffice is the software tool of data protection from unauthorized access and 4 levels of absence control of not declared opportunities and to requirements of specifications conform to requirements.

For November, 2018 KSZ MyOffice can be applied in the state information systems up to 1 class of security (inclusive) and to providing up to 1 level of security (inclusive) of personal data, and is intended for the organizations which need to confirm security of the infrastructure at the regulator.^[1]

Inclusion in the Register of the Russian software

On July 11, 2018 the New cloud technologies company announced inclusion in the Unified register of the Russian software of two more products "KSZ MyOffice" and "MyOffice Education". The order of the Ministry of Telecom and Mass Communications of the Russian Federation No. 347 allows to use these solutions "MyOffice" according to the import substitution program in the Russian IT market.

The MyOffice security tool is developed especially for cloud the products "MyOffice". The solution "KSZ MyOffice" is especially relevant for the customers who passed assessment on compliance to requirements on information security to whom application of means data protection from unauthorized access is important. "KSZ MyOffice" allows customers to provide with guarantee accomplishment of a large number of requirements for information security according to 17 and 21 orders FSTEC Russia, emphasized in the company.

In more detail about inclusion in the Register of the product "MyOffice Education" it is possible to read here.

Functionality and scope

(Data are relevant for July, 2018)

Functionality

• Authentication security
  • Compatibility with modern protocols of enciphering for security of authorization of users in a system.

• Security of passwords
  • Control of length, complexity and password aging and also the system of counteraction to the automated selection of passwords.

• Management of users
  • Means of support of management of accounts, including automatic blocking of sessions and accounts.

• Access control to data
  • Collecting and information storage about events of change of attributes of files and folders: access rights, checksums, size, contents and others.

• Access isolation
  • Management of access type, access rights and duration of access to files and folders.

• Record of events of security
  • Control of wrong actions of users and warning of wrong actions.

Scope

• In the state information systems up to 1 class of security (inclusive) according to FSTEC Russia order No. 17 of 2/11/2013.
• For providing up to 1 level of security (inclusive) personal data in personal data information systems according to the order of FSTEC of Russia No. 21 of 2/18/2013.

Compatibility

As of July, 2018, means of protecting of the MyOffice platform are compatible to products:

• MyOffice Professional
• MyOffice Private cloud
• MyOffice Storage
• MyOffice Mail

2017: FSTEC certificate of Russia

On June 23, 2017 the product "KSZ MyOffice" received certificate No. 3763 FSTEC Russia on compliance to requirements for the 4th level of control of NDV and specifications.

The document confirms compliance of KSZ MyOffice to requirements of the regulating document "Protection against unauthorized access to information Part 1. Information security software. Classification by the level of absence control of not declared opportunities" (State Technical Commission of Russia, 1999) — on the 4th level of control and specifications of TU 501410.2914487-2016-01.

Certificate validity period — till June 23, 2020.

Notes