Amtel-Service: Service of protection of PDN

Amtel-Service, IT service company in Russia, announced in March, 2017 start of a special offer on services of personal data protection (PDN) and ensuring compliance to requirements 152-FZ. The block of works regarding protection of PDN on web resources of the organizations executed according to new requirements of Roskomnadzor will be rendered free of charge within complex projects.

For the last one and a half years of the requirement of Roskomnadzor and other state regulators in the field of personal data protection in Russia became noticeably above and punishments for violations become more tough. It concerns as the requirement for localization of databases of the containing PDN of Russians in the territory of the Russian Federation, and gain of checks regarding processing of PDN on the websites and in mobile applications of the companies and organizations. So, in the projects implemented Amtel-Service in 2016, the block of the works connected with functioning and policy of web resources of customers grew more than by 10 times.

All web resources used by an operating company of personal data are exposed to the detailed analysis: the corporate websites and the intranet portals, online stores, social networks and communities, mobile applications of all types – as connected with the system of orders of goods and services, and containing interactive and entertaining content. Documents on processing of PDN on web resources of the company should contain a set of data, beginning from the owner, the developer and the administrator of a resource, the PDN list processed when using websites/applications, arrangements of databases, descriptions of functioning of services for registration of users and a personal account, newsletter services, online orders and payment and to such parts as collecting and data processing with the installed web analytics counters (for example, Google Analyst, Yandeks-Metrika), uses of cookies files, justifications of access rights in mobile applications and so forth. Privacy policy during the processing and storage of PDN should be developed for each website.

"Substantial increase of depth of the analysis of the websites and mobile applications of the companies, and respectively the requirement to detailed documentation of all processes connected with personal data was unexpected as for operators of PDN, so for service providers — Zaletsky Alexey, the head of department of information security comments on Amtel-Service. — Each web resource is unique and requires individual study of the description in documentation, there are no ready templates. Fortunately, our company already managed to get the hand on similar projects in the companies in about ten websites and applications which successfully underwent thorough testing of regulators".

Projects on development of a documentation package and ensuring protection of Internet resources are performed by Amtel-Service company as separately, so within complex projects on ensuring compliance to requirements of the legislation in the field of personal data protection. "Having analyzed the projects implemented for the last year and requirements of the market, we decided to render the works connected with development of documentation on web resources of the companies, free of charge. Certainly, if this block of works is implemented within complex projects — Alexey Zaletsky comments. — This offer will work until the end of 2017".

Range of services on personal data protection:

• Audit on compliance to requirements 152-FZ, 242-FZ
• Development of model of threats and complete packet of internal organizational and administrative documents
• Development of technical solution on creation of a system of protection of PDN
• Implementation of technical solution, including delivery, installation, setup of the equipment and software, development of operational documentation, trial operation of a system
• Evaluation tests ISPDN
• Maintenance of passing of checks Roskomnadzor, FSTEC of Russia, FSB of Russia.