Cross Technologies modernizes the system of certified secure communication channels at VimpelCom

2025: Upgrade of Certified Secure Communication Channel System

On April 28, 2025, Cross Technologies announced the modernization of the system of certified secure communication channels (SZKS) at VimpelCom PJSC and ensuring support for its performance. The system complies with the requirements of federal laws on personal data (FZ-152) and critical information infrastructure (FZ-187), as well as the requirements of the FSB of Russia and the FSTEC of Russia.

According to the company, the system provides cryptographic protection for data transmitted over channels communications provided to external users, which is a mandatory requirement of the law.

The main tasks of the system, in addition to cryptographic protection of data transmitted via communication channels, were protection against data distortion, ensuring centralized control and monitoring of SZKS components, ensuring fault tolerance of SZKS components and the availability of a valid certificate of compliance with the requirements of the legislation of the Russian Federation in the field of information security for the cryptographic information protection tools used.

Cross Technologies engineers, during the modernization and support of the system, collected and analyzed the initial data necessary for the development of design and technical solutions, developed design and technical solutions with functions protection of data transmitted via communication channels and developed a set of technical documentation for SZKS.

The object of automation is a distributed network throughout the country. The public Internet network is used as communication channels, the channels have a bandwidth of up to 1 Gbps.

The traditional approach to the organization of secure corporate communication channels involves the implementation of a comprehensive project. As a rule, it consists of standard stages: infrastructure design, equipment acquisition, execution commissioning and further maintenance of the system throughout the life cycle.

However, in large companies with a distributed branch network, there are always unique features of the IT infrastructure. Such organizations, as a rule, have their own staff of information security specialists. In such cases, the company can involve an integrator to design and deploy a secure data network, taking on the further operation of the system. However, the use of certified cryptographic information protection (CIPF) systems is associated with a number of difficulties. The key ones are a shortage of qualified specialists, difficulties in setting up equipment and ensuring compliance with the requirements of the FSB of Russia for operation. A separate problem is the organization of round-the-clock support for cryptosystems, since this requires the formation of a replacement team of information security specialists on the supplier's side.

To prevent these problems in advance, PJSC VimpelCom took advantage of the experience and expertise of Cross Technologies employees. The work on the modernization of the SZKS system was carried out by the integrator according to a previously approved scheme and was divided into seven main stages: examination and analysis of initial data, technical design, development of working and projects of organizational and administrative documentation, supply of equipment and software, implementation of a design solution, security analysis and certification of SZKS for compliance with information security requirements. After the upgrade was completed, the system was transferred to the Cross Technologies service center, which provides support and technical support for the system in 24/7 mode.

We highly appreciate the cooperation with Cross Technologies - the completed projects meet quality standards and safety requirements. The decision to organize a system of secure communication channels made it possible in the shortest possible time not only to ensure security during data transmission, but also to increase manageability and observability, which is extremely important for all modern digital services. For us, the main value is that the partner offers not just technology, but an integrated approach with an understandable economic model. We are confident that further joint work will bring new results. told Aleksei Drozd, head of the cryptographic protection service of PJSC VimpelCom

We thank PJSC VimpelCom for its trust and are already planning further work to improve the system. told Lev Fisenko, executive director of Cross Technologies