The Sirena company has successfully completed a cycle of works on certification of PSS Leonardo for compliance with information security requirements.
As part of the first stage of work, PSS Leonardo was certified for compliance with the requirements of the Federal Law "On Personal Data" dated June 27, 2006 No. 152-ФЗ. In the course of these works, the compliance of the personal data protection system created and operated by the Sirena company with the requirements of national legislation and regulators in the field of information security of the Russian Federation was confirmed. The assessment was carried out by the independent certification entity DialogNauka JSC.
Together with PSS Leonardo, another innovative development of Sirena company, the TransHost passenger service system, also achieved certification.
To confirm the compliance of PSS Leonardo in the field of information security with international requirements, the certification of the PSS Leonardo system for compliance with the requirements of the ISO / IEC 27001: 2013 standard was chosen.
ISO / IEC 27001 is an international information security standard, developed jointly by the International Organization for Standardization and the International Electrotechnical Commission, to validate the company's effective system for protecting confidential information.
The certification audit carried out by representatives of TÜV NORD CERT GmbH (Essen, Germany) confirmed the compliance of the Sirena company management system with respect to PSS Leonardo to the requirements of the international information security standard.
“The activity of Sirena is connected with the use of a large volume of personal data of clients, therefore the issue of protecting information systems is one of the priorities in our work.
We are glad that the high degree of data protection and management of IT security processes have been attested by both Russian leaders in the field of information security and international independent certification bodies, which have confirmed the full compliance of the technologies and solutions developed by Sirena with the highest requirements for information security and functionality.
The certification of Sirena's flagship information systems is a high assessment of the company's work in the field of information security, which gives the company additional advantages to promote its services and services, " commented Igor Morachev, First Deputy General Director of Sirena.