Industry Standard for Data Protection

2025: Joining Rostelecom

Rostelecom has joined the industry standard for data protection - a single set of requirements and recommendations for ensuring information security. This was announced on April 17 by the president of the Big Data Association (ABD) Anna Serebryanikova.

The industry standard was developed by ABD together with Russian IT companies and establishes the principles of storage, processing and protection of personal data, as well as criteria for assessing the maturity of information security systems among operators who work with such data.

{{quote 'author=said Igor Lyapunov, Deputy President, Chairman of the Board of Rostelecom, General Director of Solar Group. | Joining our company to the industry standard for data protection is an important step to counter one of the key threats of the digital age - information leaks. Research shows that the country's population is becoming increasingly concerned about its digital security. Under these conditions, cybersecurity becomes not just a technical defense tool, but a key condition for trust on the part of customers and partners. We are confident that compliance with the standard will help reduce risks and create a reliable foundation for protecting sensitive user information that we work with on a daily basis,}}

Шаблон:Quote 'author=noted Anna Serebryanikova, President of the Big Data Association.

In accordance with the standard, Rostelecom must undergo an independent audit. It will be conducted by an expert group of specialists from companies and organizations with licenses for activities in the field of technical protection of confidential information. Experts will evaluate the security system according to a number of criteria, including the organizational model and management of data protection, information security policy, as well as action plans in response to threats. In addition, an analysis of the processes for identifying vulnerabilities, responding to emergency situations and training employees will be carried out.

2024: Transition of Avito, VimpelCom, Tinkoff Bank and Yandex to the Industry Data Protection Standard

On April 18, 2024, representatives of Avito, VimpelCom, Tinkoff Bank and Yandex signed a document on the transition to the Industry Data Protection Standard developed at the Big Data Association (ABD) site.

As the press service of the ABD clarifies, the document is a roadmap that defines the standards for storing and protecting data, allows you to assess the effectiveness of processes within the information security system in the company.

𝓲

Фото: Unsplash

The industry standard contains a set of measures that allow personal data operators to independently assess the maturity of the established information protection processes, confirm the correctness of the conclusions made with the involvement of external organizations and effectively improve management and organizational processes.

According to the new standard, independent audits can be carried out by expert groups from among the specialists of the companies themselves and organizations licensed to carry out activities for the technical protection of confidential information. The companies that supported the standard undertake to conduct an audit every year.

They will evaluate the security system according to a number of criteria: the model of organization and management of data protection, the policy of information protection, the plan of measures to develop threats. Separately, it is considered how the company identifies vulnerabilities, responds to emergency situations, as well as how staff are trained, the Big Data Association said in a statement.

According to ABD President Anna Serebryanikova, the industry standard for data protection sets a high bar for information security systems, which is especially important now, when "the risks of cyber attacks are especially high." She expressed the hope that the Industry Data Protection Standard will be supported by other IT market participants.^[1]

Notes