cybersecurity becomes part of corporate strategy / Economic news of Krasnoyarsk and the Krasnoyarsk Territory / Newslab.Ru

Cybersecurity has ceased to be a supporting function and is becoming a strategic element of business management, said Alexey Kubarev, director of information security at T1 Cloud (T1 IT holding).

Since the beginning of 2025, the number of cyber attacks on business organizations in Russia has exceeded 105 thousand, which is 46% more than the same period last year. Among other things, serious attacks on IT infrastructure continue to intensify—in the third quarter, the number of highly critical information security incidents reached 7.6 thousand.

Particularly in connection with this, there has been an increase in interest in information security products: this year, 56% of corporations reported that they increased spending on cyber protection by 20–40%. According to Alexey Kubarev, in 2025 there was a significant shift in the perception of information security. It is no longer determined by the corporate strategy, but is a significant part of it – a basic setting, without which it is difficult to imagine the existence of a business, its sustainability and continuity. In addition, information security opens up new opportunities for companies to generate income.

In the context of increased requirements for ensuring the security of internal business infrastructure, assessing the information security maturity of external IT partners remains one of the most important stages in forming agreements. Alexey Kubarev noted that, for example, T1 Cloud uses a multi-level approach when selecting counterparties, which includes both analysis of documents and verification of their compliance with the company’s internal standards.

“When starting to work with new partners, we use classic verification tools – questionnaires, requests for attestations and certificates, analysis of public data, leaks and reputation. Having determined the circle of finalists, we introduce them to our information security rules for contractors and the draft contract. It spells out their responsibilities, establishes the possibility of an audit by our company, and also provides for liability for violation of requirements and compensation for damage from an attack if the incident occurred due to the fault of the contractor. If after this the partner is ready to sign the agreement, we begin cooperation, but continue to pay special attention to monitoring its activity and provide access only to those parts of the infrastructure that are needed to fulfill the agreement,” the expert explained.

Newslab now in MAX. News is also published in OK | VK | Zen | Telegram