Integrator of ready-made solutions
A system integrator offering ready-made and custom-developed information-security solutions.

Building a protection system, information-security design, an information-security assurance subsystem (ISAS), and infrastructure design and modernization.
Government organization No. 1
Data-center construction and certification

Tasks
1. Building an effective public-administration system based on the use of information and telecommunications technologies
2. Building a regional information and communications infrastructure
3. Ensuring interaction with federal state information systems
4. Implementing and developing information systems that support operations
5. Ensuring comprehensive management of the implementation of information and communications technologies

Conditions
The need to create a data center to host key services. Protection of information in the data center.

Question
• Design of the data center and its internal infrastructure for hosting the required services
• Selection and configuration of equipment, design of a protection system, and preparation of the project in accordance with GOST

Solution
• Pre-design audit
• Data-center design
• Information-security assurance subsystem (ISAS) design
• Commissioning works
• Acceptance testing
• Data-center certification

Result
An audit was conducted, based on which a “roadmap” for building the data center was developed. The roadmap described the main steps and their sequence for creating the data center, and technical solutions were selected. Commissioning works were then completed. The next step was the design of the information-security assurance subsystem and its commissioning — acceptance. Certification is planned.
Government organization No. 2
Conditions
Ensuring compliance with regulator requirements for a critical-information-infrastructure (CII) facility.

Question
Verification of the compliance of design documentation for an industrial control system (ICS) segment.

Solution
1. Technical inventory of server and network equipment
2. Technical inventory of ICS equipment (controllers, SCADA servers)
3. Analysis of server and network equipment configurations
4. Analysis of software configurations
5. Assessment of the current performance and resource consumption of server equipment
6. Analysis of access lists for servers, system software, and application software, and preparation of proposals for changing them

Result
A report was prepared on the current state of the ICS segment and network infrastructure. A roadmap was designed for building an information-security system that meets the regulator’s requirements.