The Standoff 365 is a cyber range where technological and business processes of real enterprises and industries are modeled. The platform helps the business to see the weaknesses of the IT infrastructure.

Information security staff can use the platform to practice the skills of protecting the corporate environment from cyber attacks and countering digital threats.

As of November 2021, The Standoff 365 consists of a cyber polygon, which recreates the operational and business processes of the fuel and energy complex. The launch of the platform is scheduled for May 2022.

Moscow

Positive_Technologies

The Standoff 365 is a cyber range where technological and business processes of real enterprises and industries are modeled. The platform helps the business to see the weaknesses of the IT infrastructure.

 
 Information security staff can use the platform to practice the skills of protecting the corporate environment from cyber attacks and countering digital threats.

 
 As of November 2021, The Standoff 365 consists of a cyber polygon, which recreates the operational and business processes of the fuel and energy complex. The launch of the platform is scheduled for May 2022.

The Standoff 365

information_security

cybersecurity

The Ministry of Digital Development will use the platforms of Positive Technologies and Cyberpolygon for Bug Bounty to find vulnerabilities of the Gosuslugi public services portal. However, at the moment, the ministry does not plan to actually reward the participants, because “the use of Bug Bounty platforms was proposed by the companies themselves”.

 
 Yaroslav Babin, head of the Standoff 365 Bug Bounty by Positive Technologies, says white-hat hackers are willing to search vulnerabilities for free, because “they are interested in challenges and value the experience and their platform rating”. He believes, the participation can lead to being hired or invited to limited projects of other clients. Luka Safonov, Cyberpolygon CEO, says that in this particular case the company is ready to pay the rewards on its own, but “it will not be a matter of hundreds of millions, but about 100,000 rubles for one vulnerability”.

 
 The founder of the DLBI data leakage and darknet monitoring service Ashot Oganesyan warns the participants “can use the opportunity for their own benefit”.

<hr />
 
 Earlier it was <a href="https://ict.moscow/news/mintsifry-planiruet-legalizovat-belykh-khakerov/" target="_blank" rel="nofollow">announced</a> that the Ministry of Digital Development planned to introduce the concept of Bug Bounty into the legislation to legalize the payments to information security specialists, who look for vulnerabilities in information systems on a contractual basis.

<hr />
 
 <a href="https://ict.moscow/news/dlia-poiska-uiazvimostei-portala-gosuslugi-zadeistvuiut-platformy-positive-technologies-i-kiberpoligona/" target="_blank">Original in Russian</a>

Vedomosti

Platforms of Positive Technologies and Cyberpolygon to Be Used to Find Vulnerabilities of Gosuslugi Portal

The government has developed a draft decree, which specifies the requirements for top managers responsible for cybersecurity in government bodies, constituent entities of the Russian Federation, state funds, state corporations, strategic enterprises and organizations, and subjects of critical information infrastructure (banks, telecom operators, etc.).

 
 The person responsible for cybersecurity would be required to have a higher specialized education “no lower than a specialist’s or master’s degree” or undergo professional retraining. He must understand “the impact of information technology on the work of an organization”, techniques of building information systems, including systems with limited access, ensure the security of company networks, know “the main security threats, the prerequisites for their occurrence and possible ways of their implementation”, as well as their consequences, etc. Such an employee will be liable for violation of his/her duties, action or inaction leading to an unacceptable incident, and disclosure of state secrets.

 
 Experts interviewed by Kommersant say that, considering the staff shortage, it will not be easy to find suitable specialists. According to HeadHunter, by June, 24% more job vacancies in the field of information security were posted on the portal than in 2021 (3.2 thousand in 2022 and 2.6 thousand in 2021), while currently 14.3 thousand CVs are posted on the portal. According to representatives of the service, there are four job applicants per vacancy, which indicates a shortage of specialists.

 
 According to Maria Sigaeva, director of educational programs and projects at Positive Technologies, on average, the annual demand for information security specialists is estimated at 18,000-18,500 thousand people, excluding managers. However, only 14,000 specialists with higher education in cybersecurity graduate annually.

 
 <a href="https://ict.moscow/news/k-top-menedzheram-po-kiberbezopasnosti-ustanoviat-riad-trebovanii/" target="_blank">Original in Russian</a>

Kommersant

Requirements to Be Set for Top Managers Responsible for Information Security

An information security consortium is expected to be created in Russia for exchange of experience and common solutions development. Positive Technologies, Kaspersky Lab, R-Vision, as well as specialized units of Russian Railways, Rosatom and other companies may join the consortium.

 
 There is no concept of consortium in the current Russian legislation, but there is one of partnership. The latter involves a joint activity agreement between several legal entities acting together without creating a legal entity to make a profit, says Yaroslav Schuetzle from the Rustam Kurmaev and Partners law firm.

 
 The Ministry of Digital Development supported the proposal, but specified that “first of all, this is a commercial project, not a state one”. Rosatom says that “combining resources and capacities will bring the next generation of cyber security systems to the domestic and global markets”. Kaspersky Lab noted that “there is a shortage of resources in the industry right now, so the unification would be useful”. According to a source of Kommersant, the legal structure of the project “is in development, and all partners are yet to approve it”.

 
 <a href="https://ict.moscow/news/v-rossii-mozhet-poiavitsia-konsortsium-po-kiberbezopasnosti/" target="_blank">Original in Russian</a>

Cyber Security Consortium Discussed in Russia

The Ministry of Digital Development proposes to make the control of the activities of software developers by Russian persons the priority criterion for inclusion in the register of Russian software instead of the participation share of a Russian person in a software developer (currently it should be at least 50%). Head of the Ministry of Digital Development Maxut Shadayev sent a letter with the related proposal to Deputy Prime Minister Dmitry Grigorenko. The proposals have also been sent to the Ministry of Finance and the Ministry of Economic Development, which must approve them by May, 20.

 
 According to the document, current regulations do not allow “a fair number of Russian companies” to add their products to the register of Russian software.

 
 According to Anatoly Dyubanov, director of the Digital Economy Development Department of the Ministry of Economic Development, the Ministry “supports the initiative to clarify the requirements.” This will make it possible to add products of software development companies “whose shares are freely floated on the stock exchange” to the register and will also become an incentive for other companies to enter the stock exchange, Dyubanov explained.

 
 In 2021, the Ministry of Digital Development already proposed to simplify the inclusion of software in the register for developers whose head offices are located abroad. However, the Ministry of Economic Development objected to this, pointing out that the amendments can make the public sector depend on foreign developers.

 
 The list of Russian IT companies whose shares are traded on the Moscow Exchange includes Yandex (the parent legal entity is registered in the Netherlands), VK, Positive Technologies, MTS and others.

 
 <a href="https://ict.moscow/news/mintsifry-predlozhilo-smiagchit-kriterii-vkliucheniia-v-reestr-rossiiskogo-po/" target="_blank" rel="nofollow">Original in Russian</a>

The Ministry of Digital Development Proposes to Soften the Criteria for Inclusion in the Register of Russian Software

At the end of last year the revenue of Positive Technologies was estimated at $83.7 million (7.1 billion rubles), with a 28% increase, according to the company's<a href="https://group.ptsecurity.com/storage/documents/investors/konsolidirovannaya_otchetnost_po_MSFO_za_2021_god.pdf" target="_blank" rel="nofollow"> financial results</a>. The company’s net profit for the past year amounted to $22.4 million (1.9 billion rubles), which is 27% more than a year earlier.

 
 The company’s experts expect that in 2022 net profit will be from 3 billion to 5 billion rubles, and net profit margin will be from 30% to 35%.

 
 <a href="https://ict.moscow/news/positive-technologies-za-god-uvelichila-vyruchku-na-28/" target="_blank" rel="nofollow">Orignal (in Russian)</a>

The Standoff 365

Acronis Files

Megafon DLP

Cyber Intelligence Platform

Sakura