PCI DSS RUSSIA 2012

Third International Payment System Security Conference

Graduated from MSU named after M.V. Lomonosov, faculty of computing mathematics and cybernetics.Worked in such biggest international audit companies as Deloitte and KPMG. Now he is a partner in the Group of Companies “4x4”.

Andrey specializes in consulting services in the field of corporate IT management, information security, risk management and audit. Directed the projects on the assessment of the current IT and information security status for primary stock placement, mergers and acquisitions; also on the assessment of the control systems and control in the field of IT and information security according to requirements of ISO 27001, STO BR IBBS,Cobit, SAS 70, MasterCard Logical Security, Sarbanes-Oxley law.

Andrey is a certified auditor of information systems (CISA), certified manager in the field of information security (CISM), certified specialist on corporate management of IT (CGEIT), certified auditor and teacher of STO BR IBBS.

Andrey is an expert of ABISS, vice-president of Moscow department of Association of information security auditors, a member of expert council of RISSPA and ASTRA associations. Work experience in IT and information security sphere – more than 25 years.

Born on November, 30, 1985 in Moscow. Graduated the Moscow State Technical University of Civil Aviation in 2008, specialized in information security of telecommunication systems.

Working experience:

05.2008-05.2009 – OJSC “OTPBank”, class III advisor

05.2009-03.2010 – OJSC “OTKRITIEBank”, Head of Telecommunication security office

04.2010 – present –“Infosecurity Service”, Ltd, Head of Banking technologies security office

Scope of professional interest: building complex systems of information security in credit institutions based of risk evaluation.

Information security business – consultant of Cisco Company.He is in a workgroup ARB/CB on the development of the 4th and 5th Russian Bank versions.He participates in the examination of legal acts, in the field of information security and personal data. As an independent expert he is a member of Consulting Center of ARB on the using of 152 federal law“About personal data”.

He is a member of subcommittee #1 “Information Security in credit-financial sphere” of Technical Committee # 122 “Standardization of financial services” in technical management and metrology Federal Agency. He is a member of Subcommittee # 127 “Methods and Means of IT security” of Technical committee 22 “Information technologies” in technical management and metrology Federal Agency (performs ISO/IEC JTC 1/SC 27 functions in Russia). Also he is a member of “Public hearings on the harmonization of legislation concerning protecting subjects of personal data”Organizing Committee. He published more than 600 articles and 5 books on information security. He is the author of many courses on information security, including “ Measurement of IS efficiency”, “Threat modeling”, “Management of IS incidents”, “How to connect security and business” and others.

Deputy director of security Department, head of information security management in “Rosselhozbank” JSC. He was born in Moscow in 1969. More than 15 years he has been working in the field of information security of banking system. In 1999 he defended his PhD. Theme of his dissertation – firewalls. Actively participated in the development of the set of documents in the field of standardization of information security of Bank of Russia. Docent at MSTU named after N.E. Bauman. Laureate of “Silver dagger” Professional award in the field of information security. Member of ARSIB board.

The head of sales department in Uniteller Company. Dmitry Lemachko graduated from MEPI, faculty of Cybernetics. He is an expert in the field of sales, has 10 year experience of analyst and business consultant, including large complex projects in the field of receiving and processing of payments by the bank cards in the Internet and self service. He began his career being a developer of fiscal systems for FTS with subsequent career development from leading consultant-analyst of “Rosbusinessconsulting” (development and implementation of portal technologies for government structures) and up to general manager of “Alef Consulting” Company (development of ERP-systems and payment applications for large and small business).

At present, apart from being a sales director in Uniteller, Dmitry is a consultant of “e-Government” project in “Rostelecom” and leading specialist in the field of applied payment solutions for banking and commercial sphere.