Kazakhstan Commodity Exchange "ESTAU" chose "SearchInform" products to protect against leaks

2024: Implementation of SearchInform CIB and SearchInform SIEM

The Commodity Exchange of the Republic of Kazakhstan "ESTAU" protects the complex electronic trading system using the solutions of the Russian developer "SearchInform." In August 2023, the customer implemented two vendor systems at once, which ensure the information security of internal processes: SearchInform CIB and SearchInform SIEM. The solution developer announced this on March 27, 2024.

Previously, the organization used only antivirus products to protect the local network. However, the tools controlled a limited number of channels and did not provide sufficient protection for the organization. The consequences of possible malware penetration into the exchange's IT infrastructure could lead to serious problems. ESTAU chose the implemented information security systems among several developers.

Since strict requirements are imposed on the exchange site in terms of information security, we were faced with the task of finding a solution whose functions meet all the conditions for ensuring information security, "said Andrei Petrov, information security specialist at the ESTAU commodity exchange. - And we found such software - SearchInform solutions closed our needs. During the month that was allocated for testing, we were convinced that the DLP and SIEM functionality fully corresponds to the declared vendor. We were satisfied with how quickly the systems were deployed. Implementation managers conducted free evaluation training and we started work. In addition to functionality, we were attracted by the fact that CIB seamlessly integrates with the entire SearchInform product line, which simplified the work of the information security department. I also liked the vendor's pricing policy.

As of March 2024, the DLP system SearchInform CIB has already been deployed in the IT infrastructure of the ESTAU commodity exchange. This allows the customer to fully control the information flows and actions of exchange employees and archive data. Also, the work of the system is aimed at protecting the data of participants in the exchange market.

SIEM from "SearchInform" allows you to work with various sources of information security events on the principle of "one window": the system groups, analyzes events and, if necessary, notifies about the incident. In addition, in the SearchInform solution, the customer noted the convenience of the connection map tool, which shows which PC is authorized by which users, and highlighted the presence of support for the 1C Connector for reading 1C log events.

The commodity exchange "ESTAU" has introduced the main systems to ensure internal information security. This approach allows you to comprehensively solve information security problems. DLP is the main data protection solution, and SIEM is the main means of protecting the IT infrastructure. Systems are integrated with each other, so SIEM is significantly enriched with events directly from the workplace, through DLP agents. The data breach protection system receives an operational picture of the infrastructure as a whole - new objects, identified vulnerabilities and other threats are combined in a specialized incident management interface, common to two systems, - commented Alexey Parfentiev, head of analytics at SearchInform.

Based on the test results, Kazakhstan Commodity Exchange "ESTAU" plans to increase the volume of implementation of "SearchInform CIB" and "SearchInform SIEM."