The participants plan to conduct an audit annually. Any company on the market can join the initiative
Today at the Data Fusion 2024 conference, four Russian IT giants signed an industry standard for data protection developed at the site of the Big Data Association (BDA). The document was signed by «Avito», «VimpelCom» (trademark «Beeline»), «Tinkoff» and Yandex. This was reported by the companies' press services.
The standard includes the basic principles and mechanisms for reliable data storage and protection. Companies may voluntarily undergo independent audits to determine compliance with the proposed standard. The data protection system will be assessed according to a number of criteria:
- Model of organization and management of data protection;
- Information protection policy;
- Threat counteraction plan;
- Algorithm for identifying vulnerabilities;
- Staff training level.
Vlad Fedulov, managing partner of «Avito», shared:
Our business is built on user data, and their trust is vital for Avito. Therefore, we are constantly working on the safety of our site. We are expanding our staff of specialists to confidently counter threats. Every year we carry out attack simulations with the involvement of independent experts and make sure that our systems are reliably protected. The new industry standard will help us and other data controllers generally become more transparent about the steps we take to protect user data.