The construction of command center of information security is completed in the Volga-Vyatka bank of Sberbank of Russia

NVision Group constructed Command center of information security in the Volga-Vyatka bank of Sberbank of Russia.

Subject

NVision Group and the Volga-Vyatka bank of Sberbank of Russia completed the project on creation of command center of information security of SOC (Security Operation Center) for information infrastructure of bank. The center is constructed based on the solution ArcSight ESM.

Result

Creation of command center of information security of ArcSight ESM allowed Volga-Vyatka bank to solve the whole range of problems. Among them monitoring of security of the applied systems and services, implementation of function of collecting of data from all necessary sources of events (from sources of infrastructure and network equipment, including from the personal FPSU-IP/Client firewall, the software Antivirus of Kaspersky and DrWeb). The complexity of the project consisted in a geographically-distributed structure of an information system of bank and also available a large number of non-standard data sources and high requirements to fault tolerance of the IC. Other features of the project of steel integration of the SOC center with the Personnel and Salary system and with the HP ServiceDesk system.

Administrators and operators of the applied systems received idle time, at the same time operational and effective data access about a status of information security of a corporate system. The warning system of employees of the bank about threats of cybersecurity thanks to which specialists of operating units can receive on e-mail and by the SMS information on incidents of security and timely react was implemented.

Feedback

The vice-chairman of the Volga-Vyatka bank JSC Sberbank of Russia, Alexander Lezov commented on project completion on creation of the center: "On the basis of the implemented command center information security we created really failsafe information system which is reliably protected from the different information attacks. It allows us to provide uninterrupted service of the clients, practically to exclude the costs connected with failures in network functioning, with emergence of threats of data loss and with lack of availability of critical services. All our efforts are directed to quality improvement of service of our clients".