OREANDA-NEWS. August 16, 2011. Within the framework of a pilot project at KAMAZ-Diesel, a subsidiary of OJSC KAMAZ, an information safety management system (ISMS) based on ISO/IEC 27001:2005 was developed and implemented. Auditors of Russian Register Certification Association from St. Petersburg were invited to assess and confirm compliance of the ISMS with this international standard.

"We have been checking the ISMS at the factory for four days, using well-known auditing methods: observation, communication, interviews with experts,” says Natalia Selivyorstova, the head of the auditing group. “All these measures helped us to find out that the ISMS was implemented at the plant. According to the results of the audit, we will recommend Russian Register Certification Association to issue a compliance certificate to KAMAZ-Diesel Inc. Also, I’d like to say that the employees of the company dealing with the information safety management system realize the importance of information safety and effectiveness of this standard."

The workers of KAMAZ-Diesel carried out hard work, even though information is not the staple of the company. The company’s experts examined how information technologies influence their work, what information they need to protect, what may happen in the event of information leakage.

Leading auditor Igor Zvyagin noted that the main work was carried out by the quality control department which performed an unusual duty: "We consider the ISMS implemented at the production enterprise as a great foundation for the future, because KAMAZ is the first industrial enterprise in Russia which introduced such a system."