Today, transparency is a vital element in the digital world we all rely on. Kaspersky Global Transparency Initiative includes a number of actionable and concrete measures to engage with the wider cybersecurity community and stakeholders in validating and verifying the trustworthiness of its products, internal processes and business operations.
Kaspersky started to process malicious and suspicious files shared by users of Kaspersky products in Europe in Zurich, Switzerland. The data, which users have actively chosen to share with Kaspersky, includes suspicious or previously unknown malicious files and corresponding meta-data that the company’s products send to Kaspersky Security Network (KSN) for automated malware analysis.
DATA, INDEPENDENT REVIEWS AND MORE…
Within the framework of our Global Transparency Initiative we have relocated our cyberthreat-related data storage and processing for a number of regions to Switzerland. We have also opened our first Transparency Center in the country.
Third-party assessment of internal processes to verify the integrity of Kaspersky solutions and processes:
- • SOC 2 audit by one of the Big Four accounting firms;
- • ISO 27001 certification for data security systems.
– Long and famous history of neutrality, similar to our policy for the detection of malware: we detect and remediate any malware attack
– Robust approach to data protection legislation
Malicious and suspicious files shared by users of Kaspersky products in Europe will now be processed in data centers in Zurich, initiating the first part of a relocation commitment made by the company in late 2017 under its Global Transparency Initiative. The move reflects Kaspersky’s determination to assure the integrity and trustworthiness of its products and is accompanied by the opening of the company’s first Transparency Center, also in Zurich.
Transparency Centers serve as facilities for trusted partners to access reviews of the company’s code, software updates and threat detection rules, along with other activities. Through them, we provide governments and partners with information on our products and their security, including essential and important technical documentation, for external evaluation in a secure environment. They also serve as a briefing center where trusted stakeholders can learn more about the company’s portfolio, engineering and data processing practices.
Kaspersky Transparency Centers are operating in Zurich, Madrid, Kuala Lumpur, São Paulo, Singapore, Tokyo, and Woburn.
At all of Kaspersky’s Transparency Centers, the company provides the opportunity to compile the company’s software from its source code and compare it with the publicly available one.
No other cybersecurity provider has done anything as far reaching as this. In opening its Transparency Centers, Kaspersky makes a significant step towards becoming completely transparent about its protection technologies, infrastructure and data processing practices.