You are here: Home / Клиенты / Наши проекты / Development Of Personal Information Protection System For Mango Telecom

Development Of Personal Information Protection System For Mango Telecom

GlobalTrust reports about the project on development of Personal Information Protection System of Mango Telecom – the Russian provider of cloudy communication services.
Development Of Personal Information Protection System For Mango Telecom

Mango Telecom develops software, provides in rent of the software (SaaS business model) and communication services, working at the edge of IT and telecommunications.

During this project GlobalTrust experts solved the following problems:

  • Providing compliance of processing of personal information of Mango Telecom to legal and statutory requirements
  • Development of the Personal Information Protection System according to the Resolution of the Government of the Russian Federation No. 1119 "About the approval of requirements to protection of personal information at their processing in information systems.

These works included two stages:

  1. Inspection of personal information processing systems, determination of security level of personal data, development of model of the violator and model of actual threats, and also specification on creation of Protection System.
  2. Technical design of Protection System and development of organizational and administrative documents on processing and protection of personal information, including: provisions, plans, instructions, orders, acts, data registers, lists, forms of obligations, notices and agreements.

"Processing and protection of personal information at telecommunication operators has the specifics. It caused development of the industry standard of protection of personal information by "the big three" of mobile operators. A number of operators have difficulties with new legislation that coming into effect since the September 1, 2015 and obliging to use an existing in the territory of the Russian Federation database when gathering personal data. Practice of regulation of processing and protection of personal information in "clouds" just starts being formed. The new international standard ISO/IEC 27018:2014 – “Practical guidance on protection of the personal information processed in public clouds” - the first step in this direction. All these questions have to be coordinated to requirements of the Russian regulators: FSTEK, FSB and Roskomnadzor", – Alexander Astahov, the CEO of GlobalTrust noted.