RussNeft plans to introduce Russian DCAP system from SearchInform

2020: Plans for the implementation of SearchInform FileAuditor

On January 18, 2021, SearchInform (SörchInform) announced that RussNeft, one of the country's oil and gas companies, plans to introduce a domestic system to protect confidential data at rest - the SörchInform FileAuditor product.

A special solution was needed to find and protect sensitive information wherever it was located, which is especially important with a distributed enterprise infrastructure. FileAuditor provides search, classification of such data, as well as continuous audit of access rights to critical files and operations that users perform with them.

When selecting the tool, RussNeft relied, among other things, on the principles import substitution ON at the facilities. critical infrastructure The pilot project was held from August to December 2020.

During the testing, the system was tasked with tracking unauthorized actions with important documents: orders, contracts, long-term plans, which are approved by the company's governing bodies. If such files are edited after the fact or at the stage of study they fall to those who do not have access rights, this is at least a risk, and more often a direct indication of a security incident. We've set up file classification rules that require management sighting or contain service marks. This made it possible to understand where to increase attention in order to make the document flow safer, - told PJSC NK RussNeft.

The system passed the "battle test": the company rated the test results positively. Now "RussNeft" is considering the introduction of "SörchInform FileAuditor" for continuous control of file repositories.

Read also

Auditing and Data Protection Principles