Customers: Commercial center
Contractors: Microtest Product: Projects of external audit of IT and security (in tch PCI DSS and SUIB)Project date: 2012/10 - 2013/01
|
The Microtest company developed the engineering design on creation of an information security system and organizational and administrative documentation for JSC Commercial Centre, the press service of the contractor reported on January 21, 2013.
Background
Security of information at implementation of purchasing activity are a problem of paramount importance for Commercial center. Collecting, processing and data storage are performed in the company according to the standards adopted in head structure. So, all subsidiary companies of Rosatom State Corporation should perform processing of confidential information in an automated system of a class of security 1G.
The information security system created in JSC Commercial Centre should provide:
- Protection against unauthorized access to system resources;
- Protection at network interconnection;
- Antivirus protection;
- Cryptographic protection of communication channels;
- Detection and prevention of network attacks;
- Analysis of vulnerabilities of a system.
Implementation
Works are begun with the analysis of IT infrastructure which was carried out by specialists of Microtest company. Based on preproject inspection the tekhnorabochy project on creation of an information security system is developed and also organizational and administrative documentation is created.
On the basis of data retrieveds Commercial center independently made implementing solution, constructed on Cisco the products S-Terra Microsoft, LirVPN and provided secure access of users to different information depending on their rights or job responsibilities.
Upon termination of implementation the Microtest company carried out comprehensive evaluation tests of a system on compliance to class 1G according to requirements of data protection. Besides, within the project specialists of system integrator created the recommendations about setup and configuring of the information security tools used in 9 regional representative offices of JSC Commercial Centre.
"The solution created using specialists Microtest allowed us to reduce significantly risks of unauthorized access to confidential information, to prevent the potential external and internal attacks directed to severable or complete breach of operability of business applications", - Alexander Matyunin, the head of department of technical support of JSC Commercial Centre noted project results.
It is supposed that cooperation of JSC Commercial Centre and Microtest company will be continued: the agreement provides carrying out by system integrator planned annual audit of the created system on compliance to the stated requirements.