Gazprombank Leasing automated information security incident management using R-Vision SOAR

2025: R-Vision SOAR Implementation

The group of companies Gazprombank Leasing has implemented R-Vision SOAR to automate incident management. information security The project was implemented jointly with "," IT OF which provided expert support at all stages. The solution helped the information security service of the Group to speed up the processing of incidents by 50%, reduce the burden on specialists and increase the transparency of processes. Leasing Gazprombank announced this on April 10, 2025.

During the project, a comprehensive analysis of the existing information security processes of Gazprombank Leasing was carried out. At the first stage, the project team, together with IT FROM experts, built new processes based on world practices in the field of handling security incidents. These processes were then automated with R-Vision SOAR.

Automation of incident processing is not just a reduction in response time, but a transformation of the entire information security management system. R-Vision SOAR allows you to build transparent and predictable processes, minimizing the human factor. It is important that the customer team is actively involved in the process of adaptation and development of the system, which increases the effectiveness of the project in the long term. said Ruslan Akhmedov, head of the development of information security services "IT IZ."

All information security incidents recorded by internal monitoring means are received by the R-Vision SOAR system. The product automatically registers and classifies them, including problems with the operation of information leakage protection tools. Based on pre-configured response scenarios, the system initiates appropriate actions to eliminate threats, which has increased the response rate by 50%.

Previously, incidents were stored in disparate systems, which made them difficult to process and increased response time. Specialists had to manually search for data in different sources, compare information and only then take action. Now the entire process is centralized: the system automatically collects and processes incident data in a single interface. Information security managers now have access to convenient dashboards, which helps to assess risks and make informed decisions. This ensured transparency of processes and faster response to incidents.

Well-built incident management processes are the basis of a sustainable cybersecurity system. In this project, we not only implemented the SOAR system, but created the foundation for further expansion of automation. Integration with asset monitoring and management systems will allow the company to quickly identify threats and minimize their consequences. said Igor Smetanev, Director of Strategic Development at R-Vision.

When choosing a solution, we focused on the maturity of the technology and its compliance with our tasks. It was important not only to automate incident processing, but also to get a tool that can scale and adapt to our processes. The IT-OUT experience and the flexibility of R-Vision SOAR allowed us to lay the foundation for the further development of the security system, noted Sergey Udartsev, Deputy General Director for Security, Gazprombank Leasing.