RusHydro optimized use of the EDS in the company

On August 20, 2015 the Digital Design company announced end by RusHydro holding of the project focused on decrease in threats of information security.

Project Tasks

One of project tasks — the organization of the measures aimed at providing the legal importance of interactions in the company using the electronic signature.

RusHydro, 2013

Project Progress

For the solution of assigned tasks specialists of Digital Design booked audit of organizational documentation of RusHydro and about fifty applications that helped to define scenarios of application of the electronic signature.

Partners in the project made the decision to upgrade the Certificate authority operating in RusHydro to Certification center that in the long term will help to reduce time and finance costs by identification of users and interaction with external partners.

During the project the staff of Digital Design created the project and upgraded certificate authority to Certification center JSC RusHydro on the platform of the software of Crypto Pro of UTs, implemented additional resources of providing the safe electronic signature (service OCSP (Online Certificate Status Protocol) and Time-Stamp Protocol (TSP)), developed a set of project, operational and organizational and administrative documentation.

The concept on decrease in threats of information security at the enterprise is developed. The measures directed to information system protection of internal perimeter, remote access and a mobile circuit entered it.

Staff of Digital Design designed and unrolled in RusHydro a system on the platform of the product JaCarta Management System of Aladdin R.D. company.

A system allows "see" date of issue to the employee of the hardware key, date of its obsolescence, the certificates and "keys" written on is mute (for the signature in the workflow system, for work in the system of e-mail, for interaction with external systems). As in each RusHydro branch certificates and keys are issued by own information security specialists, both the Certification center, and a management system for key carriers have distributed nature.

Project Results

"The concept developed by specialists of Digital Design mentions not only our current, but also future tasks of gain of data protection of the company and risk reduction connected with dependence on the foreign software. We are going to follow also further this concept for security not only applications of a vista shot, but also specialized programs" — Andrey Nemudrov, the head of department of information and technical security of economic security department, the mode, special work types and data protection of RusHydro reported.