Andek completed the project on personal data protection in Tserikh

The Andek company completed the project on reduction in compliance of processing of personal data to requirements of federal law No. 152-FZ in the TsERIH Capital Management investment company working at the stock market and the rendering service of broker and depository service.

The TsERIH Capital Management investment company considers one of the key principles of the work orientation to customer needs that, of course, includes also security of their personal data which leakage threatens not only serious reputational risks, but also penalties from the regulator. According to the current legislation, security of personal data is an obligatory task of each operator. For project implementation on reduction of processing (PDN) the Andek company was selected.

Project implementation began with the analysis of the operating order and the set purposes of processing of PDN, all information systems which are used in the Company for personal data processing were identified. Recommendations about elimination of all revealed discrepancies of an order of personal data processing in the Company, conforming to requirements of the legislation were made. Recommendations were presented in the form of the plan considering specifics of the Company, its business processes and already operating measures for personal data protection.

The next step specialists of Andek company developed models of threats and violators of security of personal data. For each personal data information system, existing in the Company, the recommendations about neutralization of relevant threats and implementation of the necessary protective measures set by the legislation were created.

Within this project all necessary internal regulating documentation regulating both processing of PDN, and processes of information security support was developed.