JSB Russlavbank implements means of protecting of personal data

The ReignVox company completed the project on personal data protection in JSB RUSSLAVBANK (Ltd).

Solution and terms

Project works began in the third quarter 2010 and, according to its contractors - experts of ReignVox.

Within the project on personal data protection (PDN) of bank by specialists of ReignVox expertize of the business processes and information systems of bank concerning personal data processing (both employees of the bank, and his clients) is carried out.

According to the results of inspection of information systems specialists of ReignVox developed model of threats and the violator, technical requirements to the system of personal data protection (SZPDN) of bank and also - a packet of necessary organizational and administrative documentation and technical specifications on creation SZPDN.

Result

Preparation of JSB RUSSLAVBANK for its practical reduction ISPDN and business processes in compliance to requirements of Federal law No. 152 "About personal data" became result of the carried-out works. Recommendations about implementation of specific technical means of protection became one of the obligatory elements providing compliance to requirements of the legislation.

Specialists of the company integrator recommended for use of means of two-factor authentication of users, applicable for all structure of bank including the central office in Moscow and also eight regional branches and representations.

Feedback

Sergey Bludov, vice chairman of the board of bank: "Ensuring high multistage confidential information protection of our clients and employees and observance of requirements of the legislation defined for us importance of the implemented project".

"One of the basic principles by which we were guided in work – cost minimization of the customer and reasonable sufficiency in the choice of technical means of protection", - Yury Cherkas, the head of department of information technical protection of ReignVox company comments. – "Owing to this fact we aimed to avoid implementation of additional resources of protection due to use of the means of protecting which are already available in JSB RUSSLAVBANK. And those means which we recommend to implement in addition belong to means of the analysis of security and registration of the events connected with providing Information Security".