OGK-3 (DeviceLock)

The Leta company, the operator of the typified IT services, announced end of the complex project on creation of a system of protection against leakages of confidential data (Data Loss Prevention, or DLP) in "Third generation company of the wholesale electricity market" (OGK-3). The implemented DLP solution covers the central office and regional divisions of the enterprise – six the operating state district power plants of federal level.

In OGK-3 the information security (in particular, confidential information protection) is one of invariable priorities at improvement of a management system and development of the corporate IC. At the same time the company aims to use the checked front lines of the cybersecurity solution of the Russian and world suppliers. Within this strategy by the customer internal security requirements of confidential information were formulated and the project of creation of the corresponding complex DLP solution in which the Leta company became the contractor is started.

As a technical basis of the solution it was selected by software of Symantec of DLP. This system is focused on large enterprises and high requirements to the level of confidential information protection and personal data from leaks and movement. Symantec of DLP covers all structural elements of the IC of the enterprise: a data network, storage systems, corporate databases, various unstructured information in mail storages and in electronic documents of different formats, jobs of employees, servers of different function, electronic document management systems, etc. At the same time this DLP system uses the most modern technologies of identification of confidential data and reacts to the revealed violations in real time, automatically applying the blocking politicians and registering incidents. Strength of Symantec of DLP is also high extent of its integration into a single system of information security of the enterprise. Besides, the Leta company has considerable experience of implementation of this system at the Russian enterprises.

At the same time, in the project it was used by DeviceLock software from SmartLine, allowing to appoint the personified access rights to USB devices for different categories of users and also to flexibly regulate access to functions of the record CD/of DVD recorders. At the same time the built-in system of remote administration simplifies management of the software package DeviceLock on large enterprise.

The project went to OGK-3 on the typified scheme for this class of DLP solutions. At the initial stage Leta conducted examination of the IC of the customer and prepared a document package, necessary for detailed planning of all project and the beginning of works on implementation. At an implementation stage specialists of Leta set and configured modules of Symantec of DLP according to the politicians of cybersecurity applied in OGK-3 and also additional politicians developed. Then comprehensive tests of a DLP system were carried out, and along with them there was a preparation of all necessary organizational technical documentation. Upon termination of the period of trial operation the DLP system of OGK-3 was transferred to a planned operation mode.

"Counteraction to leakages of confidential data with which the staff of our geographically distributed enterprise constantly works is the major task. Need of the highest requirements to such protection becomes obvious if to take the place which our company takes in power supply system of the region and whole country into account, – Yemelyanov Dmitry, the leading expert of Department of the mode and information security of OGK-3 emphasized. – For successful implementation of plans we needed the most perfect DLP technologies and the partner who is thoroughly understanding them able to create from them the solution which could counteract reliably malefactors and not prevent work of fair employees. The project showed that our partner, the Leta company, completely meets these requirements".

"Modern technology platforms of DLP allow to reveal timely practically any unauthorized actions with confidential information and personal data, to react in a complex to them. But completely to realize the potential of these systems in the real project, the correct binding of the solution to features of work of the enterprise requiring deep setup of each module is necessary. Unfortunately, now such approach is not really characteristic of the typical DLP project in the Russian market, and it conducts to many negative effects, – Konusov Andrey, the CEO of Leta company noted. – But the project in OGK-3 just gives an example of the correct approach to creation of DLP systems at which there are accurate and strict requirements to the solution, the permanent interest of the customer in their accomplishment where in the work plan the adequate place is allocated to preproject DLP consulting. It is sure that over time it will become characteristic of the majority of the Russian DLP projects. And I think that the project in OGK-3 will accelerate this transformation of the market".