Jet Infosystems have developed a model for assessing the information security level for Rusagro

2022: Development of an information security assessment model

The IT company Jet Infosystems has developed a methodology for the Rusagro Group of Companies to assess how information security contributes to the achievement of the goals of the agricultural holding business.

Previously used in "Rusagro," the scoring model was based on a universal maturity model (CMMI) well suited for initial measurement. However, strengthening the business orientation of information security, a phased increase in the level of maturity of processes and the number of protective measures required the development of their own methodology.

Our company systematically increases the level of information security - over the past 5 years we have come a long way. An increase in the number of protective measures, an improvement in information security processes required deeper analytics. We realized that we had "grown out" of the existing measurement tool and decided to move on to a more detailed, but at the same time understandable assessment of the information security level, "explained Alexander Danchenkov, head of the Rusagro information security service.

The Information Security Health Model tool developed in Jet Infosystems combines estimates of various indicators and relies on performance indicators (KPIs), which are segmented into different levels of the management hierarchy and are related to business goals. So each management level can get the data slice that is in its area of ​ ​ interest.

For visualization, the specialists of Jet Infosystems have developed a system of dashboards that visualizes the values ​ ​ and the relationship of 9 key KPIs with more than 50 operational metrics of information security processes.

We have been working with Rusagro for many years. With the growing level of maturity, the basic approaches that worked before already gave the desired effect. To link the real state of affairs with visual digital indicators, we have developed a separate methodology. The resulting tool is now used by both the top management of the company and information security specialists, - said Alexander Morkovchin, head of the consulting department of the information security center of Jet Infosystems.