Tender №C02807 for the Provision of Services to Deploy and Configure Security Subsystems for the Critical Information Infrastructure Facilities

-       Security subsystems for the Company’s critical information infrastructure facilities (SS CIIF) survey.

-                 Update and approval of the SS CIIF detailed design documentation.

-                 Checking of built-in security mechanisms in system-wide software, including configuration.

-                 Implementation of a subsystem to protect against unauthorised access, including the installation and configuration of tools to prevent unauthorised access.

-                 Configuration of the anti-virus protection subsystem, including configuration of anti-virus protection tools and tools to control removable media.

-                 Configuration of the data backup and recovery subsystem, including configuration of data backup and recovery tools.

-                 Implementation of a virtualisation environment protection subsystem, including installation and configuration of tools to protect the virtualisation environment on servers.

-                 Conducting preliminary testing of the SS CIIF in accordance with the approved document ‘Programme and Methodology for Preliminary Testing of the SS CIIF’.

-                 Conducting trial operation of the SS CIIF in accordance with the approved document ‘Programme and Methodology for Trial Operation of the SS CIIF’.

-                 Carrying out vulnerability analyses of software and hardware, including information security measures and CIIF.

-                 Carrying out acceptance tests of the CIIF software and hardware in accordance with the approved document ‘Programme and Methodology for Acceptance Testing of SS CIIF’.

-                 Valid license from the Federal Service for Technical and Export Control (FSTEC) of Russia.

-                 Valid license from the Federal Security Service (FSB) of Russia (for the provision of services relating to encryption, distribution and maintenance of encryption (cryptographic) tools, information and telecommunications systems secured using encryption (cryptographic) tools).

-                 Experience in designing security subsystems for critical information infrastructure (hereinafter, CI) facilities for automated process control systems (hereinafter, APCS) at Russian oil and gas industry enterprises.

-                 Experience in implementing organisational and technical security measures for the security subsystems of critical information infrastructure (CII) for APCS at Russian industrial enterprises.