SEC NRS confirmed the compliance of the Automated Information System to the Information Security Requirements

19.02.2019 The Scientific and Engineering Centre for Nuclear and Radiation Safety (SEC NRS) sets high value to the necessity of meeting the information security requirements, including personal data.

The integrated project on creation of the information security system included three major stages:

• pre-project survey of the Automated Information System (hereinafter to be referred to as AIS) intended for processing of the sensitive information;
• upgrading of the existing infrastructure in compliance with the requirements of information security law;
• certification tests for compliance with the information security requirements.

At the first stage of pre-project survey the information from each segment of the Centre AIS was collected and analyzed in order to shape the requirements to information security, to development of recommendations on updating and/or correction of organizational-administrative documentation, as well as to upgrading and/or extension of license terms and retrofit of information security products. Based on the results of this stage the model of an attacker and information security hazards was developed, and the necessary level and class of security was determined.

At the second stage of the project, the package of organizational-administrative documentats was updated for all segments of the AIS, the information security products were put into operation.
At the final stage of the project the works on cetification of the SEC NRS AIS were carried out. In frames of this stage the technical certificate was developed together with the tests program and methodology, the adequate conclusion was prepared and the certificate of conformance to the information security requirements was issued.

Stable functioning of information systems, communication means, and security thereof are of high importance to SEC NRS being a significant factor for the Centre effective evolution in the process of implementation of challenges for the scientific and technical support to Rostechnadzor on the basis of advanced, including digital technologies.