Sberbank has introduced a protection system against leaks Solar Dozor

2022: Solar Dozor Implementation

Sberbank and RTK-Solar have implemented a project to protect against information leaks using Solar Dozor. Sberbank announced this on June 23, 2022.

The system ensures the security of information assets of all divisions of the bank in the Russian Federation and monitors more than 250 thousand workstations.

Along with strengthening the external protection of Sberbank's perimeter, the task of improving the level of security when working with confidential information and personal data within the bank is being implemented. One way to solve this problem is to prevent data leaks from employee computers using a DLP (Data Leak Prevention) class product. In a short time, a team of specialists was formed in the bank with experience in implementing large-scale projects, installing and operating DLP systems and developing regulatory internal bank documents.

When choosing a tool, it was necessary to take into account the current experience of owning a DLP system and form a number of new requirements, taking into account the development for the next few years. The product should provide the bank with both "classic" control of mail correspondence and prevention of any attempts to move information outside the employee's computer, as well as control of all centralized communication channels. This brings product requirements to a very high level, including event processing in a single management interface, informing response personnel, and integrating with one of the SOCs (Security Operations Center).

At the end of the competition, the introduction of the software product was implemented in a very short time for projects of this scale - in just six months.

As a result of the well-coordinated work of the bank and RTK-Solar teams, it was possible to introduce a leak protection system and extend its influence to the entire bank from Kaliningrad to Kamchatka. Most of the work was carried out during an emergency situation around the world. An effective, well-scalable tool to prevent information leaks was created, which improved the bank's overall security indicator both by increasing the coverage of leak channels and by identifying and responding to protected information. As a result, it was possible to ensure total control of the transmitted information, - said Sergei Lebed, Vice President, Director of the Cybersecurity Department of Sberbank.

To protect against leaks, Sberbank uses Solar Dozor functionality, which includes filtering and storing data in the archive, searching and managing information security events and incidents, as well as mechanisms for maintaining a dossier of persons.

Solar Dozor quickly adapted to any volume data and number of users, the emergence of new communication channels and integration points, - saidIgor Lyapunov, the General Director, Vice President of RTK-Solar.

Thanks to this project, the Solar Dozor software product itself received a significant impetus for development. The reliability and performance of the system have increased, the model of its own monitoring of the health of the product has been significantly improved and continues to develop.