I.T. Co. created a personal data protection system and implemented a complex system of information safety monitoring and management at Baikalwestcom. The project helped to improve the protection of information systems considerably, and to satisfy legislative requirements in the field of personal data protection (PDP).
Baikalwestcom is the largest mobile operator in Eastern Siberia, with 100% of its shares owned by Rostelecom OJSC. To ensure protection of information about subscribers and adhere to the legislative requirements under 152-FZ "On personal data", the company's management initiated a project for the creation and further copying of the information system for personal data protection, in over 40 offices and subsidiaries of Baikalwestcom located in Irkutsk and the Irkutsk Region. The project's implementation was entrusted by the customer to the I.T. Co., which has considerable experience in implementing solutions of this kind.
Before starting work, specialists from I.T. Co. audited Baikalwestcom's information system to check compliance with the laws. They then developed the technical project and the executive documentation. The main criterion for the technical solution was to preserve the unification of the equipment operated by the company. Since the mobile operator's telecommunication infrastructure is based on Cisco equipment, the S-Terra solution was chosen as the main component of the personal information protection system.
At most of the subsidiaries, the PDP system was implemented remotely due to the distances between the offices, some of which are located in remote areas.
The build-up system for personal data protection uses various means of protecting information: VPN gateways, antiviral programs, attack detectors, firewalls and systems for providing protection against leaks of confidential information. This system encompasses the network infrastructure and all the information systems installed at the company, including a billing system based on the CBOSS software product.
The pilot operation of the new information protection system lasted about 9 months. Based on the data collected, the improvements required were introduced into Baikalwestcom's PDP system, and it was then successfully certified, which involved an assessment of conformity with the current regulatory base in the field of personal data.
The protection system created caters for almost 900 people who use the information systems containing personal data, and also provides effective protection for more than 2 mil. records about Baikalwestcom subscribers.
In order to manage information safety effectively within the framework of the company as a whole, the specialists implemented Security Vision, a complex system developed by I.T. Co. The unified center for IS monitoring and management ensures the collection, regularization and correlation of events, inventory taking and monitoring of the company's assets, and incident prioritization and management. The system automatically compiles over 200 reports in accordance with the requirements of the corporate information security policy.
Baikalwestcom CJSC is the largest mobile operator in Eastern Siberia, with 100% of its shares owned by Rostelecom OJSC. Today, Baikalwestcom provides services in the GSM-900/1800 and CDMA 2000 1x EV-DO standards. The company began its activity in 1995 by deploying a network with the NMT-450 standard. Today, the GSM and CDMA networks of Baikalwestcom provide communication to over 700 localities in the Irkutsk region. The total number of subscribers exceeds 2.2 mil.