Kaspersky Lab recently revealed that it is moving its assets and processes from Russia to Switzerland as part of its Global Transparency Initiative. The assets involved include customer data storage and software assembly, as well as core processes such as data processing for most regions, threat detection updates, and the creation of a Transparency Center. The move will be supervised by an independent Switzerland-based third party entity to ensure transparency and integrity.
“Cyber world is encountering difficult times with the rise of Balkanization and protectionism. As a result of these actions, unfortunately, the only beneficiaries are cybercriminals. We believe that we need to address this new reality, and that is why we have announced Global Transparency Initiative,” said Anton Shingarev, Vice President for Public Affairs and Head of the CEO Office at Kaspersky Lab.
Before the end of the year, Kaspersky Lab's products and threat detection rule databases will start to be assembled and signed with a digital signature in Switzerland where the company's software build conveyer will also be relocated. The conveyer refers to the set of tools used to create ready-to-use software out of source code. The relocation will ensure that all newly made software suites and applications are verified by an independent organization, and software builds and updates will match the source code provided for audit. The source code and software updates will be reviewed in a Transparency Center based in Switzerland.
“By implementing this transparent approach in cybersecurity, Kaspersky Lab is establishing an unprecedented standard in the industry. At this point in the history of cybersecurity, openness is crucial in forging transparent relationships and help establish policies that would benefit each and all to be safe from cyber threats,” Shingarev added.
By the end of 2019, Kaspersky Lab will have a data center in Zurich which will store and process data from users in Australia, Europe, Japan, North America, Singapore, and South Korea. Data includes information voluntarily shared by users through the Kaspersky Security Network (KSN), an advanced cloud-based system that auto-processes cyberthreat-related data.
“Introducing radical technology is in the DNA of Kaspersky Lab. For more than two decades, we’ve been at the forefront of developing cybersecurity technologies that were clearly ahead of its time. Right now, we’re in the midst of providing the public yet again with a game-changing approach as far as cybersecurity best practices are concerned.” said Stephan Neumeier, Managing Director of Kaspersky Lab Asia Pacific.
Kaspersky Lab's move to relocate assets and key processes, and intention to create a Transparency Center manifest the company's commitment to implement most trustworthy industry practices. These include the protection of transmitted data, strict internal policies for data access, resiliency of its infrastructure, and transparency.
“We believe we have taken a crucial first step of a paradigm shifting approach for greater transparency in the cybersecurity industry. Businesses should request for codes disclosures in their RFPs. With disclosure of source codes, biases would be eliminated and the greater public will gain the most out of it,” Neumeier added.