Spacebit has implemented the SpaceView information security incident management system in the ROSINKAS Association

2024: Automation of information security incident management process

Spacebit has completed a project to automate the information security incident management process in the ROSINKAS Association. Spacebit announced this on July 9, 2024.

ROSINKAS is a specialized carrier of cash and valuables. As of July 2024, the company's network includes more than 270 points of presence and covers all regions of the Russian Federation, which allows providing services to thousands of bank branches and hundreds of thousands of trade and service enterprises throughout the country.

The main objective of the project was to optimize the process of information security incident management in the complex geographically distributed infrastructure of ROSINKAS.

The company chose the SpaceView information security incident management system as the solution.

Thanks to integration SpaceView SIEM the -system, all information security incidents get into the IRP interface for further analysis and taking appropriate measures. The system allows you to record each fact of detecting an incident, which is supplemented information with the degree of its criticality, related users and assets, run scripts if necessary, and the response team receives prompt notifications. Response scenarios can be configured separately for different types of incidents, including risk minimization. confidential information leaks

All information about the progress of the incident response process and its current status is clearly displayed on dashboards in real time, any changes are immediately sent to all participants by e-mail. Integration with the mail server made it possible to provide the necessary information about the incident without entering the SpaceView console, all data is automatically pulled into the incident card in the system, and the status changes in accordance with the regulations. Flexible search, filtering, and grouping of incidents according to specified criteria helps you quickly and conveniently learn the details of individual incidents or groups of incidents, for example, highlight the most critical and urgent response. The system allows you to generate informative reports and graphs in various sections and views for analytics, assessing current threats to information security and planning further protective and preventive measures.

As a result of the project, we have a centralized mechanism for handling incidents arising during the operation of the IT infrastructure, timely tracking of their status and organizing the joint work of response teams. IB- and IT specialists have the opportunity to work in a single system, which allows them to effectively distribute tasks between them, ensure timely data exchange, as well as transparency and control of the results of each of the participants. The use of the SpaceView IRP system allowed us to minimize the risk of errors in the processing of incidents due to the human factor and significantly increase the level of maturity of the information security incident management process, "said Danila Gulyaev, head of the ROSINKAS information security center.

When choosing an IRP platform, the customer carefully studied the market of Russian systems, and SpaceView became the optimal solution in terms of architecture, functionality and cost. The implementation project took only a few months, we "out of the box" provided a tool for working with information security incidents, which does not require labor-intensive improvements. Thanks to the implementation of SpaceView, the level of cybersecurity, systematization of processes and transparency of the information security division has grown significantly. In addition, the customer had the opportunity to influence the road-map of the product, which allowed him to plan the development of the system and receive updates in accordance with current needs, - commented the commercial director of Spacebit Vyacheslav Trembitsky.