You are here: Home / Clients / Completed Projects / Inspection Of Personal Data Processing Information Systems Of Travel Agency

Inspection Of Personal Data Processing Information Systems Of Travel Agency

In 2010 GlobalTrust realized the project on inspection of Personal Data Processing Information Systems of the known Russian travel company.
Inspection Of Personal Data Processing Information Systems Of Travel Agency

Main objective of work was ensuring compliance of the Customer to requirements of the Federal Law of the Russian Federation with No. 152 "About personal information", and to statutory requirements.

GlobalTrust experts performed the following works during this project:

  • Gathering and documenting of evidence on personal data processing, including a physical arrangement, organizational structure, etc.
  • Identification and analysis of applicable requirements
  • Definition of personal data register, ways of their receiving, processing and protection
  • Identification and analysis of the existing processes and security controls in place
  • Development of model of actual threats
  • Identification and analysis of technical and organizational vulnerabilities
  • Development of the Security Concept
  • Development of the Specification on creation of Personal Information Protection System

Results of this work allowed the Customer to reveal the existing discrepancies to requirements of the legislation in the field of personal information, to identify weak places in system of protection of personal information and to develop the action plan on reduction of nonconformances.