SSUGT students developed a universal protocol for information security audit
Third-year students studying in the Information Security program at the Siberian State University of Geosystems and Technologies presented a universal information security audit protocol. The development was created at the Cybersecurity research and education laboratory of SSUGT under the supervision of Elena Vladimirovna Ryzhkova, assistant of the Information Security Department.
The protocol includes checklists, recommendations for eliminating risks and report templates, which allows standardizing the audit process and reducing its costs.
The product is oriented towards compliance with Russian legislation (Federal Law 152, Federal Law 187, GOSTs) and takes into account the specifics of various industries. The developers have predicted the preliminary cost of the product from 30,000 to 150,000 rubles, which makes it accessible to small and medium-sized enterprises.
The developers have already analyzed the regulatory framework and created a basic set of tools for auditing. In the coming months, testing of the protocol at pilot sites is planned.
This project can become an important step in increasing the level of information security, especially in the context of growing cyber threats and increased regulatory requirements.