Maximum protection of personal data as the basis for the trust of ENPF depositors

The UAPF places special emphasis on ensuring the security and confidentiality of pension savings and adheres to high data security standards.

For example, as part of its cybersecurity enhancements, a number of information systems were implemented in 2022-2023 to ensure the security of information resources. These innovations include a system for countering cyberattacks and protecting web servers, communication channels, and information resources from DDoS attacks, a system for detecting and analyzing malicious activity on workstations and devices, and an information security event management system for detecting and analyzing threats. A two-factor authentication system has also been implemented, significantly increasing the effectiveness of protecting the Fund's information systems and services.

The UAPF regularly undergoes international audits of its information security management systems in accordance with international standards and requirements, ensuring the objectivity and reliability of results, guaranteeing depositors the complete protection of their confidential data, and strictly adhering to regulatory requirements in the field of information security.

The Fund is actively implementing new software products and services, computerizing its business processes, and continuously improving its data protection tools. A comprehensive approach to information security includes the use of modern technologies, requiring Fund employees to comply with Information Security Rules, continuous monitoring of information flows, and the use of antivirus protection, email and network access filtering, as well as multi-factor authentication.

The UAPF is not resting on its laurels and intends to actively develop its information security capabilities. Plans include the creation of its own Security Operations Center (SOC), which will enable centralized monitoring, analysis, and rapid response to incidents in real time.

The Fund continues to monitor the latest trends and developments in cybersecurity, enabling it to effectively protect depositors' interests and ensure the security of JSC UAPF's information systems and services.

The UAPF was established on August 22, 2013, on the basis of JSC NPF UAPF. The founder and shareholder of the UAPF is the Government of the Republic of Kazakhstan, represented by the State Property and Privatization Committee of the Ministry of Finance of the Republic of Kazakhstan. The National Bank of the Republic of Kazakhstan exercises trust management of the UAPF's pension assets. Effective January 1, 2016, the responsibility for developing proposals to improve the efficiency of pension asset management was transferred to the National Fund Management Council. In accordance with pension legislation, the UAPF collects mandatory pension contributions, mandatory professional pension contributions, voluntary pension contributions, makes pension payments, maintains individual records of pension savings and payments, and provides depositors (recipients) with information on the status of their pension savings (more information at www.enpf.kz).