Information Technology in Uralkali

2024: Uralkali reorganized and strengthened information security

Uralkali In, a directorate was created - information security a structural unit that carries out functions to ensure information security. This is stated in the ESG report of the group, published in early July 2024. It follows from the current information security policy of Uralkali that earlier information security issues were under the jurisdiction of the methodology and process management department of the information security directorate of the company.

Employees of the new directorate are engaged, among other things, in the investigation of information security incidents. To improve the efficiency of information security incident management in 2023, the company created a direction of analytics and investigation of internal incidents. Its activities include:

• identification, prevention and suppression of leaks of confidential information, including Personal data, through technical communication channels;
• identification, recording, retrospective analysis, interpretation of information security incidents;
• investigation of information security incidents;
• organization of access and control of actions of privileged users.

The increase in the number of cyber attacks on the Russian IT infrastructure, including the infrastructure of industrial enterprises, is caused by an increase in external uncertainty. This contributed to the development of an integrated approach to ensuring cybersecurity in the company, - noted in the ESG report of Uralkali.

source = Uralkali

Uralkali has an information security strategy designed for the period 2023-2025. As part of its implementation in the company in 2023, a number of new solutions were introduced: a Brand Protection (SaaS) solution, an Anti-Spam solution and a multifactor authentication system ( MFA).

The Brand Protection platform is the main source of information about published leaks of user authentication data. It allows you to quickly change the compromised password or block accounts. With this solution, the network is monitored for the presence of sites - clones of official resources. The platform allows you to collect data from public communication platforms and social networks with inaccurate information about the company.

The Anti-Spam class solution works at Uralkali in conjunction with the Check Point firewall and protects incoming and outgoing messages from malicious objects, spam and phishing, performs content filtering. It became possible to use the new Anti-Spam solution within the framework of a previously acquired license for mail servers, which, according to the company, saved about 3.5 million rubles.

The two-factor authentication system allows you to confirm the second stage of authentication using SMS, a call, a messenger or a mobile application. The technology is fully integrated with VPN access. The extension of this solution to all external information assets as of the summer of 2024 is in the process of implementation.

In addition to the mentioned solutions, Uralkali also introduced an EDR class solution - a technology for detecting non-typical threats and targeted attacks on AWS. It allows information security management specialists to perform proactive Threat Hunting, analyzing atypical behavior and suspicious activity in the company's IT infrastructure.

In total, in 2023, Uralkali reflected more than 250 thousand different attacks on the company's infrastructure, statistics are provided in the ESG report.

2020: Chief information officer Kirill Alifanov leaves the company

In June 2020, Chief information officer Kirill Alifanov left Uralkali.

2019: Increased cooperation with "1C"

In June 2019, Uralkali and 1C entered into a general agreement on cooperation in the field of IT. By that time, the 1C corporate system had been successfully used by Uralkali for many years to solve a number of accounting and financial management tasks and the holding's resources. The agreement is aimed at further developing the IT partnership.

One of the key areas of cooperation is the standardization, unification and optimization of the processes of financial, economic and industry activities of subsidiaries and affiliates, management methodologies and practices, as well as automation technologies of the group companies. As part of the cooperation, it was planned to create a single integrated Uralkali management system based on the 1C: Corporation complex and 1C industry solutions for repair management, warehouse and transport logistics, etc.

2018: New Chief information officer - Kirill Alifanov

In June 2018, as it became known to TAdviser, Kirill Alifanov was appointed to the post of director of information technology at Uralkali. Read more here.

IT passport of projects in Uralkali

{{# ITProj: Uralkali}}