Russian company cyber threat assessment – ​​new defense order.strategy

After the outbreak of Russian special operations, many national information systems and large corporations faced large-scale hacker attacks. Under these circumstances, the Russian Ministry of Digital Development has instructed major state-owned enterprises to assess the level of protection of information systems and their ability to respond to cyber threats.

The letter was sent to companies in 58 major states. According to the documentation, the check must be done by July 1st. Any professional body accredited by FSTEC (Federal Services for Technology and Export Control) and FSB (Federal Security Services) can be involved in verification. The list of provinces includes companies such as Russian Post, Gazprom-Media Holding (GPM), Rosatom, SIBUR and Sberbank.

This check involves identifying the strategic risks and vulnerabilities of systems that are “available to external and internal violators” and the shortcomings of existing safeguards against threats. Unacceptable events include the leakage of personal data and other sensitive information, and fraudulent activity in the banking system.

The results of the assessment will be sent to the government and the information received will be taken into account following the ministry’s letter when developing new measures to ensure the security of information resources. This document does not clarify whether these checks are publicly funded or should be paid by the entity.

IZ: According to Ivan Melekhin, director of the Center for Monitoring and Countering Cyber ​​Attacks on SOC “Informzashchita”, organizations need to perform risk analysis and subsequent cyber investigations. The situation is complicated by the fact that the dedicated software used for verification is often not made in-house and many specialized companies have left the Russian market after the start of special operations. These include ESET, Avast, Fortinet, NortonLifeLock Inc., Forcepoint (Websense) and more.

sauce: Kommersant