What is a comprehensive information protection system (CIPS) and what are its advantages?
A comprehensive information protection system is an interconnected set of organizational and engineering measures, means and methods of information protection. The main purpose of CSZI is to ensure the confidentiality, integrity and availability of information processed in the data center or cloud environment.
The implementation of CIPS requires careful preparation, the involvement of highly qualified specialists, and painstaking work on creating a system in accordance with state standards. The main components of KSZI include:
- Organizational measures. Unify policies and procedures related to information protection — access management, passwords, algorithms for responding to cyber security incidents.
- Engineering and technical measures. These are hardware and software means of information protection - firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), antivirus programs and encryption systems, etc..
- Information protection methods. Combines cryptographic measures, access control tools, data backup and recovery methods.
The De Novo company has a valid certificate of compliance of the CIPS for the cloud and data center, which allows providing services with the highest level of protection of user information.
For example, network reliability is ensured by protected external communication channels with the possibility of connecting the Secure Internet Access Node (ZVID) and special communication networks of the SE "Ukrainian Special Systems". Management of the infrastructure with the help of the operational portal is carried out through a special VPN tunnel, which is encrypted using protocols in accordance with state standards. In addition, all critical hardware infrastructure is physically located in a shielded module. Many other security measures have been implemented, in accordance with the requirements of CIPS.
DE NOVO CERTIFICATES
De Novo's operational processes comply with high SAP standards.De Novo`s cyber security meets ISO27001 standards. Our infrastructure, data center, and cloud management systems have received government certificates and comply with all data security requirements. All of the above is confirmed by our own data center's impeccable work, which had zero downtime since 2010.
ISO / IEC 27001 Certificate of compliance Ukraine and Europe Clouds
ISO / IEC 27701 Certificate of compliance
ISO / IEC 27017 Certificate of compliance
ISO / IEC 27018 Certificate of compliance
Data center compliance with PCI DSS requirements
Cloud compliance with PCI DSS requirements
SAP Certified in Cloud and Infrastructure Operations
HPI Infrastructure Government Certificate of compliance
KSZI Certificate for Cloud Service Management Systems
IaaS / PaaS cloud services KSZI certificate