Ingrad automated IT processes with R-Vision solutions

2021: Faster response to cyber incidents and vulnerabilities

The group of companies Ingrad"" has introduced a software package R-Vision to increase the speed of response to cyber incidents and vulnerabilities and systematize processes information security in all subsidiaries. With the help of class solutions SGRC and SOAR, the development company has increased the efficiency and transparency of the built IB processes and continues to improve them. This was announced by R-Vision on August 4, 2021.

As of September 2021, there are dozens of subsidiaries in the structure of Ingrad Group of Companies, in each of which it is necessary to ensure the proper level of information security. In order to streamline the data on the assets in each of them and ensure control over their level of security, the development company decided to introduce the SGRC class platform. The SOAR class product was chosen to automate incident and vulnerability management processes.

When choosing solutions, we primarily focused not so much on their functionality as on architecture, the development team, the vendor's vision of product development in the future of two to three years. Based on the results of the analysis, we settled on the R - Vision software complex. Another aspect in favor of this choice was that these are "box" products that can be delivered and used without long and time-consuming improvements, as in the case of castomized platforms, "said Roman Morozov, head of the information security department of the Ingrad Group of Companies.

The implementation project took place in several stages. First, the development company introduced the R-Vision SGRC information security management platform. With its help, experts of Ingrad Group of Companies systematized internal requirements for information security and formalized the process of conducting IT and IB audits. Further, the solution helped them to level the level of compliance of protective measures with the corporate standard in all subsidiaries.

The next step was to automate the processes for managing IB incidents and vulnerabilities. To do this, the company's specialists used the functionality of the R-Vision IRP incident response platform. The built-in automation of routine tasks and the availability of ready-made scenarios for responding to typical incidents helped the company reduce the workload on analysts and accelerate incident processing by 7.4 times. The functionality of the vulnerability management product allowed Ingrad to abandon the introduction of a separate specialized system of the Vulnerability Management class and reduce the total amount of investment in information security.

The integration of R-Vision IRP with the company's information systems and security tools allowed Ingrad to automate other IB processes. A good example is the process of dismissing an employee. When an employee's workaround appears in the IS department, a special scenario is launched in the platform aimed at minimizing the risk of malicious actions on his part. With the help of automated scripts and instructions within this scenario, security administrators can take the necessary protective measures in a timely manner, including to limit the access of the retiring employee to corporate resources.

IB specialists of the development company use the R-Vision software complex as a single point of management for information security tasks. In the near future, Ingrad plans to implement inventory and vulnerability management in IT assets containing container environments.

Each branch of the business has a special specificity in terms of information security. Colleagues from the Ingrad Group are willing to share with us the experience of using our products, as well as regularly make proposals to expand their functionality in terms of asset inventory, incident processing and vulnerabilities, thereby taking an active part in the development of the platform. The group of companies confidently develops the trend of automation of IB processes and sets a high bar in its industry, and we are happy to help it in this by providing advanced technologies in their classes and sharing their experience, "commented Vladimir Oralov, head of customer support at R-Vision.