For business For individuals For public sector For partners
Request an engineer Help
Payment by invoice Card payment Check a payment Closing documents
Русский English 中文
Sign in
Services
Solutions
Service plans
Case studies
Training
About us
Contacts
Sign in
All services
Basic Up to 15 workstations, business-hours support Standard Up to 50 workstations, 24/7 support, servers and network Premium Dedicated team, 15-minute response Project-based One-off work at a fixed quote Free IT audit Infrastructure assessment in 5 days
IT outsourcing and technical support Requests, on-site engineers, 24/7 Service Desk Support levels and SLA Response time fixed in the contract System administration Windows and Linux servers, AD, virtualisation IT infrastructure Core environment, assessment, VDI Networks and telecom Structured cabling, design, audit and monitoring Low-voltage systems Video surveillance and access control Cloud services and hostingNew VPS/VDS, servers for 1C and Bitrix, S3 Backup Backups, cloud storage, recovery plan
Regulatory requirements 152-FZ, personal data, documentation Protection of systems and data Infrastructure, applications, databases, WAF Monitoring and control SOC, vulnerability scanners, antivirus protection Security tools Supply and deployment of security tools, VPN and cryptography
Websites and web development From a business card site to a B2B platform on 1C-Bitrix E-commerce and integrations 1C exchange, payments, delivery, marketplaces Bitrix24 and portals Portal and CRM implementation, licences Custom development Purpose-built services, mobile applications Testing and QA Functional, load and automated testing
Artificial intelligenceNew AI implementation, strategy, staff training Data and analytics Data quality, warehouses, document processing Consulting and audit Digital strategy, systems and architecture audit Marketing Audit, sales funnel, consulting
Workstations Desktops, laptops, peripherals, consumables Servers and networks Servers and storage, network hardware, UPS Retail equipment Online POS, product labelling, scanners Software Antivirus, development and admin software Training Corporate, group and individual
Not sure what to choose? We will run a free infrastructure assessment in 5 days Request an audit
All solutions
Import substitution Migration to Russian software and hardware 152-FZ compliance Documents and safeguards ready for an inspection Office relocation Network, servers and workstations at the new site Opening a branch Standard setup and a link to head office Remote work VDI, 1C access, secure channels Downtime protection Backups, monitoring, recovery plan
Retail and e-commerce POS, product labelling, online store, 1C exchange Manufacturing Shop-floor networks, servers, accounting systems Healthcare Personal data protection, fault tolerance Construction Site-to-site connectivity, workstations, CAD Logistics Warehouse, data terminals, integrations and monitoring Public sector Import substitution, portals, FSTEC requirements
Small business Up to 15 workstations, basic support Mid-sized business Servers, network and 24/7 support Large business Dedicated team, SLA, reporting Branch network One IT standard across every location
No suitable scenario? Describe your task and we will propose a solution that fits your terms Submit a request
About us What we do and how we work Special offers Current promotions and terms Contacts Phone, email and office address

What is included

The contents depend on what you are covering: the data protection law, industry requirements or internal order. Usually it comes to 10 to 15 documents.

Discuss the scope

Security policy

The top level document: what we protect, from what and who is responsible.

Orders and appointments

The person responsible for data processing, the committee, the list of authorised staff.

Access regulation

Who gets which rights, how they are granted and how they are revoked on termination.

Procedures

How to work with media, passwords and remote access, and how to respond to incidents.

Staff instructions

Short and clear, rather than thirty pages nobody reads.

Logs and forms

Media registers, records of data subject requests, briefing records. Exactly what is asked for during an inspection.

How the work runs

The main thing is that what is written can actually be followed. A document that contradicts the working process will be broken in the first week.

01

Process survey

We look at how the work is really organised: who grants access, what happens when somebody leaves, where the passwords are kept.

02

Development

We prepare the set and agree wording the company will actually be able to follow.

03

Rollout

Approval, staff acknowledgement by signature, a briefing.

04

Updating

Reviewed once a year: systems, departments and responsible people change.

A gap between the documents and the practice is the main cause of enforcement notices. The policy says data is kept for a year, while the database holds enquiries from five years ago. Formally that is a breach, and there is nothing to argue with.

Frequently asked questions

You can download one, but it describes somebody else processes. An inspection does not ask whether a document exists but how it is followed: show us the log, the appointment order, the acknowledgement signatures. That is where a generic set falls apart.

For a company of up to 100 people, usually 10 to 15. Inflating the set is harmful: the more documents there are, the greater the chance that one of them contradicts the others or is not followed.

The policy and the orders are signed by the head of the company. Procedures can be approved by the person responsible for security. Staff acknowledge them by signature, and those sheets are kept, because they get requested.

Other services in this area

The whole area
Service Full personal data compliance package Documents, measures and readiness for an inspection, turnkey Service Personal data security Technical protection of employee and client data Service Supply and rollout of security tools Selection, supply and configuration of protection tools Service Infrastructure protection Perimeter, segmentation, network access control

We will prepare the document set

Tell us what you are covering: the data protection law, a client requirement or internal order. We will propose the contents and the timescale.