Spacebit automated the work of the cryptographic protection body of the administration of the Kostroma region

2024: X-Control Implementation

The company Spacebit has implemented a system for managing the lifecycle of funds cryptographic information protection X-Control in. The administration of the Kostroma region Siberian integrator became a partner in the implementation of the project. SoftMall Spacebit reported this on August 1, 2024.

Prior to the project to automate the activities of the cryptographic security body, its employees performed all operations with CIPF manually, and the actions were recorded in Excel, which required large time and labor costs, and potential human errors increased the likelihood of threats to information security. In addition, the customer faced problems with control by the parent authority of measures with CIPF in geographically distributed lower organizations, insufficient level of coordination between departments often led to the loss of up-to-date information on the status of CIPF issued.

Thanks to the implementation of the X-Control system, it was possible to automate all processes for managing the CIPF lifecycle, operational and technical documentation for them, as well as key documents and machine-readable powers of attorney (MCD). Responsible employees were able to conduct an inventory of CIPF issued, distribute CIPF copies to subordinate organizations, monitor all operations with accounting objects, track their validity periods and generate reports on the requirements of the regulator. Any events in the system are accompanied by the filling in of copy logs, technical (hardware) log, other acts and conclusions stipulated by the requirements of FAPSI Order No. 152, printing and export of documents in xls format is supported.

X-Control implements role-based differentiation of rights based on the organizational structure of the enterprise, so that all controlled institutions and departments now have a convenient tool for working together, and the central office has an effective control mechanism. The legal significance of CIPF operations is ensured by signing all actions with an electronic signature, including UNEP and UKEP.

In addition to ensuring compliance with regulatory requirements in terms of accounting for CIPF, operational documentation and key documents, the use of X-Control allowed the administration of the Kostroma region to significantly optimize the labor costs of employees of the cryptographic protection body to maintain and support work with CIPF. In addition, the speed of inclusion of employees in workflows has noticeably increased - they receive their certificates and key media faster and immediately begin to fulfill their duties. The work of employees does not stop due to lack of access to various services, for example, when the certificate expires and its late replacement or it is impossible to sign documents due to an expired MCD or invalid EP. System control over issued CIPFs and automatic recall of accounting objects from dismissed employees minimizes the likelihood of confidential information leakage and significantly increases the overall level of information security in the organization.

In the process of digital transformation of the country and the Kostroma region, in particular, complicated by a shortage of qualified personnel, the choice of effective products becomes especially relevant, which, thanks to automation, reduce the costs of expensive specialists, as well as, which is not unimportant, fulfill the requirements for information protection. X-Control has become the optimal solution for us to optimize the accounting process and control over a large number of CIPFs used, and to comply with the regulator's instructions. With the help of the system, we managed to automate routine processes and, as a result, increase the labor productivity of employees of the administration of the Kostroma region engaged in the field of crypto protection. It should be especially noted that X-Control is a completely Russian development and operates on a domestic operating system, which is very important for achieving technological sovereignty, "commented Valery Falchikov, head of the information protection department of the Kostroma region administration.