Angara Cyber Resilience Center promoted transformation of the Center of monitoring of cybersecurity of St. Petersburg Bank

The Angara Technologies Group company announced on November 21, 2018 that the Center of cyberstability of ACRC (Angara Cyber Resilience Center) the practician of monitoring of cybersecurity in Security Operations Center (SOC) of St. Petersburg bank completed development.

Tasks

For maintenance of the high level of security of products and services the bank attracted the center of cyberstability of ACRC to the help in transformation of SOC — expansion of its opportunities to detecting of the external attacks using the practician of concealment of actions of the violator.

Project Progress

The project started with fixing of top level model of the violator and formation of the target list of scenarios of monitoring (use cases). After evaluating skills of analysts of SOC and assessment of the existing data sources, experts of Angara company suggested to set specific additional security control, to configure and replicate existing control, to connect new sources, to change politicians of logging of already existing and created the integrated development plan for personnel of SOC. In addition, they developed algorithms of identification of incidents and response (playbooks) to them according to key scenarios of monitoring.

During the project also the key process regulations of SOC which became a basis for development new the practician of work of analysts of SOC bank were updated. In particular, the technique of efficiency evaluation of management of SOC and also key regulations of monitoring and response to cybersecurity incidents was offered.

In project completion the following steps in development of SOC were defined — the road map of development of SOC by increase in competences of personnel, development of processes and technologies is developed.

Project Results

Thanks to expert consultations of ACRC we defined specific practical steps for expansion of opportunities of the Security Operations Center. We received assessment of qualification and the program of development of specialists of the 1st and 2nd lines and also could develop measures for increase in efficiency of SOC at the solution of practical scenarios of monitoring of cybersecurity, ─ the head of department on providing Information Security of St. Petersburg Bank Anatoly Skorodumov commented on project implementation.