RSS
Логотип
Баннер в шапке 1
Баннер в шапке 2

Equipment Cisco for implementation of provisions of the standard of NAUFOR

23.05.11, 14:50, Msk

National Association of Securities Market Participants (NAUFOR) and Infosecurity LLC – the Russian company specializing in rendering services in the field of data protection, – announced completion of development of the industry standard "Security of personal data at their processing in personal data information systems by operators professional participants of security market" and also methodical recommendations to it.

The standard was developed in the second half of last year and was approved on December 27, 2010 as the solution of Board of Directors of NAUFOR. For implementation of provisions of this regulating document of Infosecurity Service LLC jointly with the partner – Cisco Systems LLC – were considered whether the equipment of Cisco company conforms to this standard. Specialists confirmed Infosecurity Service: solutions of the world leader in the field of telecommunications and network security meet the requirements of the industry standard developed for NAUFOR.

The standard regulates rules which accomplishment promotes implementation of requirements of regulatory legal acts and methodical documents in the member organizations of NAUFOR in the field of security of the personal data processed in information systems of organizations and also provides neutralization of relevant security risks at implementation of the activity by the enterprises in security market. Implementation of the standard will allow to increase the level of personal data protection and also to simplify interaction of the organizations with the state regulators for information security.

For implementation of this standard use of Cisco ASA and Cisco ASA Services Module firewalls for the Catalyst 6500 switches and the Cisco IOS Firewall software products which underwent assessment procedure of compliance to security requirements and serially certified in Russia by the Federal Service for Technical and Export Control is recommended. For personal data protection, transferred on communication channels, it is reasonable to use the module NME-RVPN for Cisco ISR G2 routers certified by the Federal Security Service (FSS). As for authentication and authorization of users at access to personal data, the Cisco NAC system (Network Admission Control) or recently announced Cisco ISE system (Identity Service Engine) is irreplaceable here. Management almost all from the mentioned solutions including the module NME-RVPN, it is exercised using the system of centralized operation Cisco Security Manager.

The solutions Cisco intended for creation of network infrastructure and information security support correspond to regulatory legal acts of both the Russian, and international legislations. "The equipment Cisco is recognized not only the market, but also the public services regulating distribution and use of information security tools as in Russia, and around the world, – the business development manager of Cisco Systems LLC Alexey Lukatsky noted. – Cisco is the first foreign producer having the certificate of FSB on the VPN products which besides are manufactured now in Russia, and in a portfolio of Cisco Systems LLC more than 500 Russian certificates of conformity to security requirements today".