Access Management Process on OMNITRACKER for Yandex.Money

The Yandex.Money is one of the largest systems of e-commerce payment in the Russian market. The Customer was interested in upgrading access control systems to optimize business processes. This task involves the creation of a unified system of coordination and logging access to databases and applications, which should meet the highest safety requirements of Yandex.Money. The main criteria for choosing the appropriate solutions are:

• Effectiveness of the implementation tasks;
• Maximum adaptability of the software;
• Ability to integrate with existing systems;
• Comply with a high level of IT-security of the company itself.

In addition, the Yandex.Money Company has expanded set of tasks that include project work requirement to establish a special integrated analysis of history data. This requirement has been implemented in the Russian practice of implementing access control systems for the first time.

Solution

OMNINET was invited to a detailed description of the functional and architectural requirements to the final product. It was important for the Yandex.Money to find a software solution which, on the one hand, would have the sufficient capacity and flexibility to implement such a complex problem, and on the other hand would serve as a basis for further development of IT processes based on the ITIL model.

Development and implementation of access control system (ITIL3) were divided into several stages. During the project OMNIWAY specialists conducted the following activities:

• Developed procedural documents defining the structure of objects of access, access policy, the harmonization of access rules for the granting, off and blocking access;
• Configured, integrated and implemented information system which provides execution and control of access control;

• Worked out a reporting system that provides monitoring and analysis of the execution process;

• Assigned area of responsibility of the participants was appointed and trained staff.

Ilya Savichev, CEO of OMNIWAY: «Implementing such a sophisticated and comprehensive solution is made possible by a high degree of OMNITRACKER flexibility. It is also worth noting that a project with such a high level of complexity can be made only in those companies that fit with the utmost seriousness in all aspects of the project. After all the success it is important that the Company has its own professional staff, provides an insightful analysis of functional prerequisites, as well as carefully selected executors."

Results:

Implementation of the System will produce the following results:

The project resulted in the introduction of a unique and efficient system that can serve a platform for further automation and business process management for Yandex.
Implementation of the System will produce the following results:

• In accordance with the requirements of the audit of the facilities of access, the project has developed a model version control of all access objects (roles, data sources, policies, groups, coordination, etc.). This model allowed us to store all the status and relationship of objects to access not only to any date in the past, but also create their target state at any future date.

• Any change to the OMNITRACKER (change information in the request for connection or disconnection, the actions of performers, changing versions of policies, changing roles and relationships, etc.) were recorded in a single system of records without the possibility of removal. Moreover, the process was structured in such a way that without a successful record in the WORM further performance was impossible.

• All requests to connect, disconnect, lock or change the access directed with only a digital signature. OMNITRACKER not only allowed to verify the authenticity of digital signatures of all incoming correspondence (including control of CRL), but also to sign their own outgoing messages. As a result, messages without a valid digital signature will not be processed.
• Due to the fact that historically the performance of certain types of work performed through Jira, OMNITRACKER was integrated with it using web-services through https protocol in terms of appointment and supervision of works specialists.
• According to the information security policy of the company Yandex certain types of connections, or disable access to run automatically when you change the status of the employee (for example, when applying for a job or dismissal). To improve the efficiency of the process OMNITRACKER has been integrated with MS ActiveDirectory, which allowed for automatic control of the employee's status changes and the registration of the change request access.

As a project result The project resulted in the implementation of a unique system that can serve as a platform for further automation and business process management of Yandex.Money services. A wide range of integration possibilities of OMNITRAKER, flexibility of the product, as well as high-speed implementation on a limited budget permitted it possible to successfully implement all the tasks.

Oleg Pustelnikov, CIO of Yandex.Money: "Our demands to the system formed a very complex model of the application logic. It was especially important to this internal complexity combined with ease of use and allowed the further development and integration with other processes. Our partners from OMNIWAY professionally handled with this offbeat task and by acceptable terms. The implemented solution seamlessly fit into the daily life of our company. "

Michael Dobner, CEO of Omninet Russia: "The client spends a few tests of various software solutions for the tasks. According to the results of tests the client was convinced that only OMNITRACKER provides the necessary functionality at a reasonable price, ensuring high profitability and quick return. This project certainly can be called successful. I am sure that OMNITRACKER be useful for the company for further work on the automation of IT infrastructure.

About OMNINET

OMNINET (www.omninet.ru) – a leading supplier of software solutions in Europe for automating IT services based on the recommendations of ITIL. The company was founded in 1993 in Germany and has offices in Austria, Belgium, Netherlands and Switzerland. Since 2007, OMNINET has been developing its business in Russia and CIS countries. Since 2009, LLL “OMNINET” has been operating in Moscow. Among OMNINET´s customers, there are companies like Siemens, Union Investment, Deutsche Telekom, T-Systems, Mercedes-Benz. OMNINET´s partners in Russia are the leading system integrators: OmniWay, Cleverics, IT Expert, Inline Group, Digital Design, LANIT, BMS Consulting.

About OMNITRACKER

OMNITRACKER is a system designed to automate business processes for various types of service organizations: IT service desks, call-centers, customer service departments, system design and development organizations and other divisions. The product can be introduced easily and cost effectively, depending on the requirements and objectives of the customer and provides through the integration processes and data a high scalability regarding functionality and throughput. 

OMNITRACKER is simple to implement, administer and use. On the OMNITRACKER platform business processes of the largest companies in Europe are automated, among them: Siemens (Strategic Partnership), Sparkassen Bank, Epson Europe, Union Investment, Deutsche Telekom, T-Systems, Mercedes-Benz, Cable DV, etc. In Russia OMNITRACKER already used by companies AlfaStrahovanie, SBSistem, Cocktail, INCITY (JSC Fashion continent), Sportmaster, Ecco-ROS, Saint-Gobain, Bank Saint Petersburg, etc.

About OMNIWAY:

OmniWay (www.omniway.ru) is an authorized partner of OMNINET. OmniWay specializes in providing professional services in information management and related technologies, as well as the transfer of rights to use the product OMNITRACKER in Russia and CIS countries. The main lines of business process consulting, implementation, integration and support of information systems, training.

About Yandex.Money:

Yandex.Money (http://www.money.yandex.ru/) is the largest e-commerce payment system in the ruble segment of the Internet. Every day the system offers more than 6000 new accounts, performed more than 75,000 payments for various goods and services - from hosting and cellular communications to clothing and tickets.