Rostelecom-Solar was connected by Business Guarantor to service for skills management of information security

On October 15, 2018 Rostelecom-Solar, national provider of services and technologies for protection of data assets, target monitoring and information security management, announced connection of Business-Garant company to service for skills management of information security. Business Guarantor provided training of employees of practical cyber security based on the platform Rostelecom-Solar.

According to the center of monitoring and response to cyber attacks of Solar JSOC, about 65% of the difficult purposeful attacks to the companies begin with mailing of phishing letters to the employees. For many virus epidemics social engineering – a classical method of distribution. Increase in literacy of users in information security field remains the most effective method of fight against such cyberthreats.

The Rostelecom-Solar service for skills management of information security helps to increase resistance of the company to influence of a human factor. Employees learn to recognize harmful letters, to define the dangerous websites, to select reliable passwords and to protect the data which are stored on mobile devices.

The majority of network attacks begins with mailing of the infected letters. The worker opens the file infected with a virus, and in several seconds the corporate information system of the enterprise is exposed to powerful harmful influence. We suggest to prevent threat. Experts of the company in information security developed a capacious electronic rate which program is regularly updated taking into account the appearing cyberthreats. It will be suitable both for large corporations, and for small enterprises. Train personnel in cyber security bases less costly, than eliminate effects of the hacker attack because of an error of the person. Dmitry Proskura, vice president − direktor of macroregional branch "Volga" of PJSC Rostelecom

Service represents the platform of distance learning with access via the web interface and consists of three elements:

• theoretical course on bases of cyber security and protection against social engineering,
• online testings,
• practical check of the acquired knowledge during an educational phishing attack on the company.

At each stage of employees estimate according to the system of ratings. They get or lose points depending on whether they violated rules of passing of a theoretical rate, how truly answered questions of the test and whether could recognize threat.

The course material will be clear even to the person, far from information technologies. Vital examples help to use the websites and e-mail correctly. We will apply the gained knowledge to protection of the systems and these clients. Pavel Polyansky, representative of technical support service of accountants of Business Guarantor

All data on results of training of employees are available to the curator in a personal account of service. The resource contains the complete information about statistics of actions of users and their rating. The curator can look at the list of "vulnerable" employees and to appoint by it repeated check or an additional rate. The platform, including a personal account, is located at computing powers of Rostelecom that provides additional data protection of the customer.