OPEN JOINT STOCK COMPANY
"RUSSIAN RAILWAYS"

TELEGRAM

On the prohibition of the operation on the territory of the Russian Federation of wagons manufactured by PJSC Kryukovskiy Carriage Works, equipped with side frames of trolleys manufactured by LLC Ruzhou Tianruy Company (Kpip) (hallmark 6733)

In accordance with the order of the State Railway Supervision Authority of the Federal Transport Supervision Service dated August 30, 2013 N 27.GS.08.13 on the prohibition of the operation on the territory of the Russian Federation of 292 wagons manufactured by PJSC Kryukovsky Car Building Plant, equipped with side frames of trolleys manufactured by Ruzhouskaya LLC Tianrui company "(Kpip) (brand 6733) in 2010, before bringing them into line with the requirements of the legislation of the Russian Federation in the field of traffic safety:

1. The MCC of JSC Russian Railways to establish the logical control “Pending changes” on the indicated cars and their tracking in the CIS countries with their subsequent dismantling in the empty state. Replace the sign "Pending changes" to prohibit running "to produce from October 1, 2013.

2. Everyone In, VChDE:

2.1. After the completion of loading and unloading operations, transfer the wagons (the ponomeric list is sent to the email addresses of the dispatchers of the carriage services) with the trouble code "902".

2.2. Inform the owners of the wagons about the reasons for the dismissal and the opportunity to familiarize themselves with the telegram and regulations dated August 30, 2013 No. 27.GS.08.13 posted on the website www.rzd.ru in the section "Freight. Wagon economy".

2.3. Further actions with delayed wagons will be announced additionally.

2.4. I warn B, VChDE about personal responsibility for the organization of work to fulfill the requirements of the telegram.

3. I ask DI to establish control over the execution of the telegram.

First Deputy Head
carriage facilities
Russian Railways
A. Lukyanov

Electronic text of the document
prepared by Codex CJSC and verified against:
RZD-Partner-DOCUMENTS,
N 18, 2013

On the prohibition of the operation on the territory of the Russian Federation of wagons manufactured by PJSC Kryukovskiy Carriage Works, equipped with side frames of trolleys manufactured by LLC Ruzhou Tianruy Company (Kpip) (hallmark 6733)

Document's name:
Document Number:	30889 / CDI
Type of document:	Telegram of JSC Russian Railways
Host body:	Russian Railways
Status:	Acting
Published:	RZD-Partner-DOCUMENTS, N 18, 2013
Date of adoption:	August 30, 2013
Start date:	August 30, 2013

The task of the Security Code company is to develop, develop and promote a line of products and information security solutions among customers and partners.

Performance indicators

2018: Turnover - 4,045,000 thousand rubles

At the end of 2018, the turnover of the Security Code amounted to 4,045,000 thousand rubles, while for the second year in a row it exceeded 4,000,000 thousand rubles. The company is increasing the level of business profitability from year to year: in 2018, EBITDA reached 910,000 thousand rubles. (for comparison, this figure in 2017 amounted to 900,000 thousand rubles), TAdviser was informed on February 11, 2019 by the Security Code company.

The largest share in the company's turnover in 2018 was occupied by such areas of security as protection of network infrastructure (43.3%) and endpoint protection (34.4%).

According to the company, the leaders in sales by the end of 2018 were the products of the Continent line (1,752 million rubles), vGate (748 million rubles) and Secret Net Studio (723 million rubles). Secret Net Studio and vGate showed the highest dynamics compared to 2017: growth was 95% and 93%, respectively.

The past reporting period was for “Security Code” a year of active updating of the product portfolio and the receipt of new regulatory certificates. Continent 3.9 has appeared in the group of network security tools with new platforms, increased firewall performance and hardware crypto accelerator for encryption in accordance with GOST. Continent TLS Server 2 has been released with support for several cryptographic providers. The Continent WAF product certification procedure for compliance with the requirements of the FSTEC of Russia for firewalls was successfully completed.

The company also singles out the release of the next version of Secret Net Studio 8.4 and the product passing inspection control at the FSTEC of Russia. At the end of 2018, the FSTEC of Russia certificate was received for Sobol PAK 4, and product sales started. The key features of the next generation of trusted boot modules are support for UEFI technology, compatibility with USB 3.0, as well as enhanced functionality. An update was also released and the list of available platforms of the Terminal product was expanded - a thin client with built-in means of protecting information from unauthorized access.

The main event in the virtual environment protection segment was the release of the updated vGate 4.1 product with vNetwork Agentless Virtual Firewall, which allows creating filtering rules both at the level of an individual virtual machine and at the level of virtual machine groups.

In the past reporting period, development continued not only of product but also service segments of the company’s business, which for the second year in a row accounted for 9% of the total revenue of the Security Code. In 2018, the company added to the list of professional services such a direction as software security analysis. The interest in this type of activity is dictated by its high market dynamics, as well as by the growing demand of customers, the company explained.

In 2018, the Security Code continued the development of foreign business: the company received permits for export of Secret Net Studio, implemented with the help of partners a number of pilot projects in government and law enforcement agencies of Indonesia, Chile, Peru, and the United Arab Emirates.

We have outlined for the next year the development of not only the already familiar markets of Russia, Latin America and the Middle East. Great interest in providing real protection with the help of Security Code products is demonstrated by customers of the CIS countries and Southeast Asia. I’m sure that 2019 will be the year of the first implementation of our information security tools in these regions, ”said Fedor Dbar, Commercial Director of Security Code.

Certifications

In April 2011, it was announced that it received a decision of the Federal Agency for the Certification of Information Security Means on Information Security Requirements of the Ministry of Defense of the Russian Federation that the following products developed by Security Code LLC:

• Hardware-software complex "Sable". Version 3.0 RU.40308570.501410.001.
• Information security tool TrustAccess RU.88338853.501410.003.
• Information security tool TrustAccess-S RU.88338853.501410.004.
• Information security tool Secret Net 6 RU.88338853.501410.007.
• Information security tool Secret Net 6 (option K) RU.88338853.501410.008.
• System for collecting data on software and hardware "Security Code: Inventory" RU.88338853.501510.001.
• Information Security Tool Security Code vGate for VMware Infrastructure RU.88338853.501410.002

and having valid certificates of conformity of the FSTEC of Russia and the FSB of Russia, do not require additional certification in the certification system of information security equipment of the Ministry of Defense of the Russian Federation for information security requirements. The resulting solution allows the use of Security Code development products in structures belonging to the Ministry of Defense of the Russian Federation and its subordinate services.

affiliate program

2018

The “Security Code” affiliate program is built on a two-level sales model: the company has five distributors and an extensive affiliate network. The number of authorized partners is constantly growing, at the end of 2018 it reached 1246. At the same time, in 2018, the number of partners who made at least one sale increased by 10% compared to 2017: it amounted to 1052 partners.

In 2018, almost half of the partners showed sales growth: 532 partners improved their performance compared to 2017. 240 partners increased their partner statuses following the results of work in 2018, which is a good incentive for further joint business.

Among the TOP-4 regions where, thanks to the efforts of local partners, the level of sales of Security Code products has increased, one should single out the Southern Federal District (sales growth of 23%), the Ural Federal District (16%), the North-Western Federal District (14%), and the Central Federal District (13%).

2017

2018

  Launch of the "Software Security Analysis" service line

Technology Partnership with Kaspersky Lab

The Security Code and Kaspersky Lab companies in January 2018 announced the beginning of technological cooperation. The partnership is designed to increase the level of security of infrastructure and customer data, as well as strengthen the position of both companies in the information security market segments.

Under the terms of the partnership agreement, the Security Code gains the right to integrate a number of Kaspersky Lab technological solutions into its products. Collaboration will affect the protection of end devices and corporate networks. In the future, companies plan to extend the partnership to the field of virtual environment security.

Cooperation in the field of endpoint protection involves the integration of a solution based on Kaspersky Anti-Virus SDK technology into the anti-virus protection module as part of the Secret Net Studio integrated product. As a result, customers will have the opportunity to select and purchase an anti-virus module based on Kaspersky Lab technologies. It is planned that the use of an anti-virus module based on the Kaspersky Anti-Virus SDK as part of Secret Net Studio will be certified for compliance with the FSTEC of Russia requirements for anti-virus protection.

In addition, in the module of the intrusion detection system (SOV), included in Secret Net Studio, it will be possible to use regularly updated data streams about malicious objects - Threat Data Feeds. Means of delivery of data streams are implemented in Kaspersky SafeStream II streaming scanning technology, which is designed to detect and neutralize the most dangerous and common threats in real time. As a result, access to infected and potentially dangerous objects and Internet resources will be blocked by OWL as part of Secret Net Studio.

In the field of network protection, it is planned to include the same technology - Kaspersky SafeStream II - in the intrusion detection module of the flagship product "Security Code" - "Continent" 4, which is being prepared for release. As a result, enhanced perimeter protection of the network from malicious programs (including phishing and bot activity) will be provided by preventing malicious objects from entering the network, as well as controlling access to potentially dangerous Internet resources. The supported base of such resources totals over 500 thousand positions.

Information about Kaspersky Lab’s technologies integrated into Security Code products will be included in marketing materials and displayed in a graphical user interface. Under the terms of the agreement, sales of licenses for integrated products can be carried out both in the Russian Federation and in the countries of the former Soviet Union (Armenia, Azerbaijan, Belarus, Georgia, Kazakhstan, Kyrgyzstan, Moldova, Tajikistan, Turkmenistan, Uzbekistan, Ukraine). In the future, as the Security Code company expands in the markets of the Middle East and Africa, integrated products are planned to be sold in these regions.

2017

Turnover growth year on year by 29%

At the end of 2017, the turnover of the Security Code company amounted to 4,319,000 thousand rubles, which is 29% higher than in the previous reporting period (3,348,000 thousand rubles). The leading product areas are network security and endpoint security. The most dynamic products were security products for electronic signatures, corporate networks and virtual environments.

The largest share in the company's turnover in 2017 was taken by such areas as network security (49%) and endpoint protection (24.4%).

The highest dynamics were demonstrated by such products as Jinn (6533%), Secret Net Studio (763%) and vGate (109%) - vGate sales growth rates in 2017 (109%) exceeded the dynamics of 2016 (81%), specified in company.

According to the results of 2017, the top three sales leaders were such means of protection as Continental Industrial and Industrial Complex (2118 million rubles), Sobol PAK (455 million rubles) and Jinn (398 million rubles), previously noted as the most dynamically a growing product.

2017 was the year of the release of the fourth generation of a number of products for the Security Code. Among the radically updated means of protection should be noted "Continent" 4 (while a beta version has been released). In December 2017, sales of vGate 4.0 began. In 2017, the company released Terminal - a thin client with built-in means of protecting information from unauthorized access.

The total number of customers who purchased Security Code products in 2017 exceeded 8 thousand. Security Code products in 2017 provided protection for the federal and regional state information systems (GIS) critical for the country: Legal Statistics, Justice , "The Unified State Register of Conclusions of Expertise on Project Documentation", Federal State Information System of Pricing in Construction, "Telemedicine", "Safe City", "Contingent".

Among the largest customers of the year are the Federal Treasury, the Bank of Russia, the Prosecutor General’s Office, Rosatom State Corporation, the Federal Informatization Center at the CEC of Russia, the Ministry of Defense of the Russian Federation, the Ministry of Internal Affairs of Russia, MOEK, the Ministry of Finance of the Russian Federation, VTB Bank, and the Federal Security Service of Russia.

The company "Security Code" on October 17 announced its entry into the foreign market: for foreign expansion, the company chose a model for the formation of technological alliances. In October, a cooperation agreement was signed with the IS solutions provider in the Middle East and Africa. Previously, the company began working in Latin America, where it created a local development partner.

Background

Among the prerequisites for going abroad is that the company has many successfully operating information security products in Russia. At the same time, the dynamics of the Russian information security market, according to company representatives, are constrained by negative economic factors. At the same time, the domestic segment of the end device protection market is close to saturation.

The beginning of expansion abroad

The Security Code began to cooperate with foreign partners in 2015 - then in Uruguay the company KOD Latam Security was created, which develops local products based on the Security Code technology and their adaptation for Latin American customers. The main customers of KOD Latam Security are government and law enforcement agencies, transport companies, and the financial sector.

Entering the markets of the Middle East and Africa

To work in the Middle East and Africa, the Security Code chose a different business model: the manufacturer entered into a cooperation agreement with the security solutions provider Al Hosani Computer LLC (UAE), which became an authorized distributor of the company in the region.

Through Al Hosani Computer LLC, customers in the region will be able to purchase three flagship Security Code products that cover the full range of endpoint and virtual infrastructure protection needs:

• Secret Net Studio is a comprehensive solution for protecting workstations and servers at the level of data, applications, network, operating system and peripheral equipment.
• vGate is a solution for protecting virtualization platforms based on or Microsoft Hyper-V.
• Secret MDM is a product for managing corporate mobility and protecting data on mobile devices from the cloud or in its own infrastructure.

The Security Code solutions package meets the legal requirements of Middle Eastern countries in the field of information security, as well as modern international standards for protecting information systems in areas such as identification and authentication, access control, anti-virus protection, intrusion detection and prevention, device control, monitoring security events.

Imposed security concept

The joint work of Security Code and Al Hosani Computer LLC will allow key consumers in the Middle East and Africa to get acquainted with the concept of imposed security, which lies at the heart of the manufacturer's products. The essence of the concept is to create trusted systems in an untrusted environment. The vendor helps the customer build a security system independent of foreign IT that fully controls the data and ensures that no leakage occurs.

Corporate Identity Update

According to the company, the renewal of the corporate identity is due to the need to reflect the changes that have occurred in the company in recent years, as well as the growing scope of tasks implemented in close partnership with information security market participants.

Visual attributes began to transform in 2015, when the Security Code, seeking to strengthen the company's perception as a Russian player in the information security market, introduced images of Russian folk characters in the corporate identity, symbolizing protection and strength. National heroes - heroes - and their protective attributes - shields, helmets, chain mail, etc. - became symbols of the Security Code products. The changes that have taken place have been positively received by the market and have now received a logical continuation.

The updated logo emphasizes the Russian origin of the company. The sign is perceived as a fragment of the “heroic” protective attribute - chain mail - and reflects a willingness to respond to new challenges, an interest in harmonizing the interaction of four key aspects of the security sphere: vendor, customer, regulator, partner. The desire to move together towards a common goal is visually realized in the form of a closed chain of four rings.

In addition, the mark underlines the company's readiness to provide comprehensive data protection. The second symbolic message of the four “faces” of the logo is to present the four areas of security that the company's products provide: networking, workstations and servers, virtual infrastructure, mobile devices.

2016

2016: Business growth by more than a third

The company’s business grew by more than a third during the reporting period. The greatest dynamics were demonstrated by products for protecting networks and virtual infrastructures. At the end of 2016, the turnover of the Security Code company amounted to 3,348,000 thousand rubles (in end-user prices). This is 34% higher than a year earlier (2,504,000 thousand rubles). At the end of 2016, the Security Code company ranked 34th in the ranking.

The highest dynamics were demonstrated by such products as APKIN “Continent” (56%), PAK “Sobol” (20%) and vGate (81%). Among the growth factors is the growing demand for solutions to protect networks, end devices and virtual infrastructure from threats; the need for customers to invest in new domestic information security tools that provide reliable protection and compliance with regulatory requirements.

The leading shares in the product portfolio during the reporting period belonged to Continent APKPH (56.48%), Secret Net (19.33%) and Sobol PAC (12.59%). At the end of 2016, the sales structure of the Security Code products is as follows:

The list of the largest customers who purchased Security Code products in 2016 includes the Russian Ministry of Defense, the Federal Informatization Center at the CEC of Russia, the Federal Treasury, the Bank of Russia, the State Atomic Energy Corporation Rosatom, the Russian Ministry of Internal Affairs, the Federal Security Service of Russia, the Federal Penitentiary Service of Russia, MOEK, and the State Corporation Rostec, RT-Invest Transport Systems and Rosprirodnadzor.

  "Security Code" is accredited as an FSB testing laboratory

The Security Code announced in November that it received the FSB of Russia accreditation certificate: the regulator included the company in the list of organizations accredited in the system of certification of information security tools for security requirements for information constituting state secrets, No. ROSS RU.0003.01BI00.

In accordance with the certificate of accreditation, the testing laboratory “Security Code” receives the right to conduct studies of the functional properties of products for compliance with the requirements of regulatory documents of the Federal Security Service of the Russian Federation.

Accreditation as a testing laboratory allows the Security Code to undertake certification tests of the following product items:

• Software tools to protect information from unauthorized access (unauthorized access) and software bookmarks.
• Protected software for information processing.
• Software and hardware information security.

The main functions of the testing laboratory are to take samples of the above products for certification tests; development of a program and methodology of certification tests, their implementation, execution of protocols of certification tests and technical conclusions.

Based on the results of tests in the Security Code laboratory, the FSB will be able to conduct examination of test materials, issue an opinion to applicants, and then a certificate.

The security code product development process has been brought into compliance with the national standard GOST R 56939–2016

The Security Code company announced in the summer of 2016 the implementation of the software development process (SDL - Security Development Lifecycle) in accordance with the national standard GOST R 56939–2016. The policy adopted by the company forms the basic principles for organizing processes aimed at the release of reliable means of information protection.

  In the summer of 2016, the Federal Agency for Technical Regulation and Metrology (Rosstandart of Russia) approved the national standard GOST R 56939–2016 “Information Protection. Secure software development. General requirements". The document will come into force on July 1, 2017, it regulates the content and procedure for creating reliable software and creating an environment for the prompt elimination of errors and vulnerabilities identified by users.

In accordance with the adopted document, the long-term goals of the “Security Code” are formed as part of the continuous improvement of the quality management system (according to GOST ISO 9001–2011) and are now focused on the requirements of GOST R 56939–2016. In particular, within the life cycle of each product, procedures are carried out aimed at preventing vulnerabilities and their timely elimination; methodologies based on the requirements of GOST R 56939–2016 are being introduced, continuous audit of development processes and their optimization are carried out.

  Change of ownership

The remaining shares are distributed between the founders of the Informzashita integrator Peter Efimov (7.5%) and Dmitry Ershov (6%), as well as the financial director of Security Code Alla Skryabina (5%).

Until June 2016, the Security Code was 100% owned by Informzashchita.

Who is Elena Bokova and whose interests does she represent, could not tell TAdviser in the Security Code and Information Security.

“Security Code” announces the launch of the “Responsible Disclosure Policy”

The Security Code company announced in June 2016 the launch of a program aimed at interacting with researchers in the field of information security. " Responsible Disclosure Policy"(Responsible disclosure policy) is designed to establish the procedure for the developer and external information security professionals to detect vulnerabilities in any product" Security Code ".

The approach, when a researcher, upon detection of a vulnerability, notifies only the software manufacturer about it, allows the developer to protect users and issue patches before the vulnerability is massively exploited by attackers. The result of the regulated interaction between the developer and the external information security specialist is an increase in the company's response speed to incidents, product quality and, ultimately, the level of customer protection.

For Security Code, engaging users and researchers to test products at the beta launch stage is standard practice. In particular, a beta test of the product to protect Secret Net Studio workstations and servers was a successful example of this interaction. For three months, more than 800 specialists were able to get acquainted with its capabilities, whose wishes and comments were taken into account when finalizing the product. One of the results was the timely detection and elimination of vulnerabilities in the product, due to which the problem was fixed in the final version of Secret Net Studio.

“Early detection of a vulnerability is beneficial for everyone - both the customer and the developer: this allows you to adjust the product life cycle, quickly respond to an incident, and provide users with product updates on time. Regulation of relations between the company and independent experts and organizations in the field of

Security Code Company is a leading Russian developer of certified software and hardware tools that ensure the security of information systems, as well as their compliance with international and industry standards. Security Code products are used in all areas of information security, such as the protection of confidential information, personal data, virtualization environment, commercial and state secrets. Security Code strives to provide customers with high-quality solutions for any information security tasks, both traditional and emerging in the process of development of high technologies. Security Code Company is a leading Russian developer of certified software and hardware tools that ensure the security of information systems, as well as their compliance with international and industry standards. Security Code products are used in all areas of information security, such as the protection of confidential information, personal data, virtualization environment, commercial and state secrets. Security Code strives to provide customers with high-quality solutions for any information security tasks, both traditional and emerging in the process of development of high technologies.

Means of protecting information from unauthorized access

APKSH "Continent"  - The Continent 3.5 certified hardware and software encryption system certified by the FSB and FSTEC of Russia is a means of building virtual private networks (VPNs) based on global public networks using the TCP / IP family of protocols.

TrustAccess -high-level distributed firewall with centralized control designed to protect servers and workstations of the local network from unauthorized access, delimiting network access to enterprise information systems.

Security Studio Endpoint Protection -Protect your computer from network intrusions, malware and spam.

Trusted hardware and software modules (electronic locks)

Electronic lock "Sable" -The Sobol electronic lock can be used as a device that protects a stand-alone computer, as well as a workstation or server that is part of a local area network.

Compliance with international and industry standards

Security Code: Inventory -a software complex designed to collect, process and organize information on software and hardware installed on computers and servers in a local area network operating under Windows.

CUB -it is a tool to control access to information system resources and control information security systems. CUB allows you to quickly include users and resources in the work, as well as effectively manage accounts, rights and privacy requirements.

Antivirus, intrusion, and simulations

Honeypot Manager -it is a proactive tool for detecting hacker intrusions and unauthorized access to information, based on data simulation and analysis of user access to simulated application programs and network services.

Means of cryptographic information protection

SKZI M-506A-XP -Means of cryptographic protection of information M-506A-XP is a hardware-software complex designed to protect information in local area networks operating under MS Windows 2000 / XP / 2003.

The anniversary hopper car for the transportation of mineral fertilizers equipped with innovative trolleys with an axial load of 25 tf will be sent to the address of the transport company CJSC Acron-Trans (part of the Acron Group).

The plans of NPK OVK this year, in cooperation with partner plants, to produce up to 15 thousand freight cars with improved characteristics, most of which with an increased axial load of 25 tf.

Mineral model 19-9870 has improved technical and economic characteristics compared to typical rolling stock. The increased dimensions of the body and the axle load of 25 tf make it possible to realize a wagon carrying capacity increased by 5-6 t (up to 76.5 t) for a wide range of cargoes. An additional economic effect from the use of these cars is received by both rolling stock operators and consignors by increasing the operating profitability and reducing the cost of transporting a ton of cargo.

The formation of freight trains from such rolling stock will reduce the operational costs of Russian Railways and increase the carrying capacity of railways by reducing the fuel and energy costs of transporting goods and the cost of inspecting wagons on the way, as well as the maintenance of infrastructure due to the decrease in the dynamic impact of wagons with improved technical specifications on the way.

In addition, the overhaul interval increased to 6 years or 500 thousand km (3 years or 210 thousand km for a typical car) until the first depot repair from the moment of construction and up to 4 years or up to 350 thousand km (2 years or 160 thousand km at a typical car) between depot repairs, can significantly reduce the operating costs of the owner / tenant of innovative rolling stock.

Dmitry Bovykin, First Deputy General Director for General Management of NPK United Wagon Company, said: “The economic benefits of innovative wagons have long been known on the market. But the fact of the release of the 10-thousandth TVSZ wagon indicates that these advantages are now available to the mass consumer. ”

Information about the company: The railway holding NPK United Wagon Company (NPK OVK) is one of the leaders in innovative car building in the 1520 gauge space. The company is an integrated provider in the field of production, transportation services and operational leasing, engineering and maintenance of freight cars. In the company's fleet there are more than 15,000 different types of wagons (as of July 1, 2014).

The holding includes CJSC Tikhvin Car-Building Plant, LLC SPC Pruzhina, transport company Vostok1520 LLC, and leasing companies under the RAIL1520 brand. NPK OVK has an engineering center for transport technologies, as well as an advisory scientific and technical council. Among the company's customers are SUEK, SIBUR-Trans, NefteTransService, ZapSib-Transservice, PhosAgro-Trans, and Fuel and Energy Complex Nizhny Novgorod Express ”,“ EurosibSPb-TS ”,“ Uralchem-trans ”,“ Transport Asset ”,“ RVD-Service ”,“ Acron ”,“ Uralkali ”,“ Commonwealth ”and“ Fintrans GL ”(Ilim Group) .