INFOTECH uses the many years of experience of its leading specialists in the field of information security to provide services under the license for assessing the security of information that does not constitute a state secret.
This area of activity of the SE "INFOTECH" is intended for public and private enterprises that need to process information with restricted access.
The grounds for determining the need to create an IPSS are the norms and requirements of the current legislation (the Law of Ukraine "On Information Protection in Information and Telecommunication Systems"), according to which state information resources or restricted information, the requirement for protection of which is established by law, must be processed in the system using a comprehensive information security system with confirmed compliance.
As part of the stage "putting CISS into operation and assessing information security", preliminary tests and trial operations are carried out, which allows the customer to train personnel involved in the use of ITS in the future.
Based on the results of the development and implementation of the CISS in the ITS, the customer receives a ready-made package of documentation for the CISS in the ITS, which is transferred to an independent expert organizer (following ND TZI 2.6-001-2011, expert organizers and experts must be independent in their activities and not responsible for the creation), recommendations for further use and transfer of the ITS to commercial operation after the state examination is completed.
During the state examination, INFOTECH, as a developer, cooperates fruitfully with the organizer of the examination.
Placing up-to-date and reliable state information resources on the official website of the organization/institution promotes the development of public document circulation and simplifies the work with citizens' appeals to state institutions.
Following the Law of Ukraine on Access to Public Information, the information generated for publication on a website must be accessible, reliable, and protected from unauthorized modification.
To ensure the website security policy is following the requirements of the current legislation of Ukraine and to eliminate or minimize the damage that may be caused by unauthorized access, a comprehensive website information security system should be created. The stages of the creation of the CISS of a web page are similar to the stages of the creation of the CISS of ITS.
The team of the State Enterprise "INFOTECH" combines IT developers and experienced specialists in the field of technical information security, so it provides this service at the most professional level.
The state examination in the field of technical information protection is carried out with the aim of research, verification, analysis, and assessment of information security in ITS, as well as confirmation of compliance of the created CISS in ITS with the requirements of regulatory documents on technical information protection.
This area of activity is relevant for organizations and institutions that process information, the protection of which is provided for by applicable laws and regulations.
Following the results of the state expertise, the State Enterprise "INFOTECH" transfers to the Customer (owner of the system) a Certificate of Compliance of the Cryptographic Information Protection System in the Information and Communication System with the requirements of normative documents on technical protection of information (with annexes), registered by the Administration of the State Special Communication Service.
Experts of the State Enterprise "INFOTECH" continuously improve their knowledge and skills, monitor the latest changes in legislation, and cooperate productively with software developers, which is the key to quality expertise execution.
Consulting in the field of information protection is related to the support of the organization's work processes, during which it is necessary to modernize the existing system or introduce modern means and methods of information protection. This includes conducting training sessions with the personnel involved in the operation of information security tools.
The rapid development of INFOTECH in the field of IT and the high standards set by our government customers allow us to qualitatively analyze the current state of the means and methods of protecting information resources of any type of organization and provide practical advice on improving, optimizing and further developing the overall information security system.
As noted in ND TZI 1.1-002-99, the problem of protection against unauthorized access to information resources processed in ITS is divided into two areas:
The state examination of technical information protection means is carried out to assess the compliance of the functional security services (FSS) implemented in it and the level of guarantees of the correctness of their implementation with the requirements of applicable regulations.
