Security Vision FinCERT

Main article: Security Information and Event Management (SIEM)

2024: Optimization of "Security Vision FinCERT"

Security Vision October 30, 2024 introduced the updated Security Vision FinCERT product.

FinCERT Security Vision automates and optimizes interaction with the FinCERT regulator. The product allows you to send real-time notifications about information security events to FinCERT (incidents, attacks and operations without consent), receive requests from FinCERT about controlled resources of the organization or clients noticed in malicious activity, as well as receive bulletins about current threats and vulnerabilities. The system has been developed taking into account all the requirements of the FinCERT regulator.

𝓲

Security Vision

The product ensures timely and maximum complete notification of the regulator about recorded incidents and attacks in the required form. The life cycle fully coincides with the requirements of the regulator. Integration allows you to communicate with the regulator directly from the incident card without going to FinCERT's personal account, as well as send and receive files of all formats. To simplify the creation of incidents, it is possible to pre-fill cards according to templates. The entire history of actions with the incident, as well as communication with the regulator, is preserved in the timeline.

There is a check of the presence of requests from the regulator with the ability to point the necessary information about the results of the investigation of the incident and the measures or decisions taken. The ability to communicate with the operator without going to FinCERT's personal account allows you to quickly ask clarifying questions or send the required files. The chronology of communication is recorded in the timeline to preserve the full history of requests.

The product allows you to regularly download newsletters about current vulnerabilities and threats sent by FinCERT. Flexible configuration of the schedule for receiving ballots and convenient notifications allow you to process the required number of documents on time.

The product includes both pre-configured reports that allow you to upload data on individual incidents and attacks, as well as summary reports that display the dynamics of interaction and consolidated information on the processed information.

Dashboard displays key information on FinCERT registered incidents for the selected period and summary information on status of current incidents. The Operator has the opportunity to monitor in real time incidents in which an error occurred when sending to FinCERT in order to respond in a timely manner and make the necessary corrections.

The product natively integrates with all solutions of the Secuerty Vision line, which allows not only to meet the requirements of the regulator, automating interaction with it, but also to build a full-fledged security complex, taking into account all processes and procedures of the SOC center.