UAPF pays special attention to ensuring the security and confidentiality of pension savings, adheres to high data security standards.
So, as part of strengthening cybersecurity for 2022-2023. a number of information systems were introduced to ensure the security of information resources. These innovations consist of a system for countering cyberattacks and protecting web servers, communication channels and information resources from DDoS attacks, a system for detecting and studying malicious activity on workstations and devices, as well as an information security event management system for detecting and analyzing threats. A two-factor authentication system has also been introduced, which significantly increases the efficiency of protecting information systems and services of the Fund.
UAPF regularly undergoes an international audit of information security management systems in accordance with international standards and requirements, which ensures the objectivity and reliability of the results, guarantees contributors full protection of their confidential data and strictly complies with regulatory requirements in the field of information security.
The Fund actively introduces new software products and services, informatizes its business processes and constantly improves data protection tools. An integrated approach to ensuring information security includes the use of modern technologies, requirements from employees of the Fund to comply with the Information Security Rules, constant monitoring of information flows and the use of anti-virus protection, mail filtering and network access, as well as multi-factor authorization.
UAPF does not stop at the successes achieved and intends to actively develop its capabilities in the field of information security. Plans include the creation of its own Operations Center for Information Security Management (SOC), which will later allow moving to centralized monitoring, analysis and prompt response to incidents in real time.
The Fund continues to follow the latest trends and developments in the field of cybersecurity, which allows it to effectively protect the interests of investors, ensure the security of information systems and services of UAPF JSC.