For business For individuals For public sector For partners
Call an engineer Help
Payment by invoice Card payment Check a payment Closing documents
Русский Қазақша English
Sign in
Services
Solutions
Pricing
Cases
Training
Company
Contacts
Русский Қазақша English
All services
Basic Up to 15 seats, weekday support from 9 to 18 Standard Up to 50 seats, round the clock, servers included Premium Named engineers, response within fifteen minutes Project One task, price agreed in advance Free IT audit Five days of review and a written report
IT outsourcing and support Tickets, on-site visits and a duty line all week Support levels and SLA Response time written into the contract System administration Windows and Linux, domain, virtual machines IT infrastructure Starter setup, survey, virtual desktops Networks and telecom Cabling, diagrams, testing and supervision Low-voltage systems Cameras and access control Cloud services and hostingNew Virtual servers, 1C platforms, file storage Backup Copies, off-site storage, recovery procedure
Regulatory requirements Personal data, paperwork and technical measures System and data protection Network, software, databases and a filter in front of the site Monitoring and control Duty monitoring, vulnerability scanning, antivirus Security tools Selecting and rolling out security tools, private channels
Websites and web development From a couple of pages to a wholesale platform E-commerce and integrations Accounting sync, payments, delivery, marketplaces Bitrix24 and portals Portal, deal pipeline and licences Custom development Software built for the task and mobile apps Testing and QA Scenarios, load testing and automated checks
Artificial intelligenceNew Use cases, rollout plan and staff training Data and analytics Clean reference data, dashboards, scan recognition Consulting and audit Strategy, system and architecture assessment Marketing Channel review, deal stages, consulting
Workplaces Desktops, laptops, peripherals and consumables Servers and networks Servers, storage, switches and power supply Retail equipment Cash registers, marking codes, scanners and scales Software Antivirus, developer and admin tooling Training For a company, for a group and one to one
Not sure where to start? We review your infrastructure free of charge in five days Request an audit
All solutions
Data localisation Moving systems and data to a site inside the country Personal data protection Paperwork and safeguards before an inspection arrives Office relocation Network, servers and staff workplaces at the new address Opening a branch One equipment standard and a link to head office Remote work Virtual desktops, access to accounting, private channels Downtime protection Backups, monitoring and an incident procedure
Retail and e-commerce Registers, codes, store and one stock across channels Manufacturing Shop-floor network, servers and production accounting Healthcare Patient data and uninterrupted operation Construction Links to sites, workplaces and design software Logistics Warehouse, data collection terminals and data exchange Public sector Registered software, portals and protection requirements
Small business Up to 15 seats, simple support without servers Medium business Servers, network and round-the-clock duty Large business A dedicated team, firm deadlines, reporting Branch network The same IT at every location
Didn't find your scenario? Describe the task and we will put a solution together Send a request
About us Who we are and how the work is organised Special offers What we offer right now and on what terms For partners Terms of cooperation and commission Payment Invoice, card and closing documents Contacts How to call, write and get to us
Услуга · Information security

Database protection

The database holds your information in full and in the form most convenient for copying. Yet it is usually less protected than the application: there you have roles and separation, here a single administrative password known to several people.

Send a request What is included
Records
individual for administrators
Auditing
selective, with no slowdown
Copies
encrypted
Tests
on anonymised data

What the work includes

It all comes down to three questions: who can connect, what they are allowed to do and whether it lands in the logs.

Discuss the scope

Accounts

Individual accounts for administrators, separate accounts for applications with trimmed rights.

Isolation

Connecting to the database directly from workstations should not be possible, and from the internet even less so.

Auditing

We log queries and especially bulk selections. Exporting the whole client base has to be visible.

Encryption

Both the data itself and the backups. An unencrypted copy is a leak waiting for its moment.

Test environments

Anonymisation in training and test copies: a developer has no need for real names.

Updates

A procedure for installing fixes with mandatory trials on a test environment.

How it goes

The work goes ahead without stopping the live database. A window is needed only for updates and enabling encryption.

01

Survey

Who connects, from where and with what rights. A couple of forgotten accesses turn up almost every time.

02

Access

We cut off unnecessary network connections, create an individual account for every administrator, and shared passwords go.

03

Auditing and encryption

We start logging and encrypt the data itself along with all the archives.

04

Testing

We confirm that bulk exports are logged and that a restore from an encrypted copy actually works.

A direct connection to the database from a workstation is a door around every application role. Anyone with a database tool bypasses the whole permission model: the application restricts them, the database does not. It is closed off at network level and takes one evening.

Questions and answers

With the database administrators, each under their own account. Developers do not need access to the live database; they need an anonymised copy. A shared administrative account known to the whole department is the most common finding in a survey.

Not on the same server and not on the same network as the live database. One copy must be impossible to alter from the main infrastructure, otherwise ransomware takes it along with the original.

Anonymise it. Mechanisms exist for replacing real names, numbers and addresses with plausible invented ones while preserving structure and volume. For development and testing that is more than enough.

More in this area

Open the area
Service Personal data security Access, logging and encryption of information about people Service Organisational and administrative documentation A set of papers that will stand up to an inspection Service Supply and rollout of security products A pilot, supply and rollout against the requirements Service Infrastructure protection The network boundary, zones and remote connections

We will check database protection

Write which databases you use and who connects to them. We will look at access, auditing and how the copies are stored.