PLASMA-ZV-ARM/MONO is a secure automated workstation (a workstation in protected design, ZARM) developed and manufactured in-house by NVP «Plasmotekhnika» for processing restricted information: a computer in which, in addition to its primary purpose, passive information-protection functions are implemented. The complex implements passive protection against information leakage via technical channels: structural shielding and filtering, without additional technical protection tools (noise generators), reduce the level of hazardous emanations and induced signals without the use of interference generators. The product holds State Service of Special Communications expert conclusion No. [TBC]. Supply, implementation, certification of the workstation and subsequent support are carried out by the manufacturer itself — the customer gets a single point of responsibility across the entire lifecycle of the product.
Purpose and application scenarios
The complex is intended for equipping workstations that process restricted information: preparing and editing documents, working with databases and departmental information systems. Protection against leakage via technical channels is implemented by passive methods — shielding the housings and components of the complex and using interference-suppression filtering in the power-supply, earthing and signal circuits. This approach reduces the level of compromising electromagnetic emanations and induced signals to minimal values that satisfy the most stringent regulatory requirements, while the complex does not emit additional signals and does not create interference for other equipment in the room.
Typical application sites are government bodies and high-security enterprises where restricted information must be processed at workstations with confirmed protective characteristics. The main scenarios:
- a standalone secure workstation for processing restricted documents in a dedicated room;
- workstations within an information and communication system undergoing security authorization under Resolution No. 712 of the Cabinet of Ministers of Ukraine;
- planned replacement of obsolete secure workstations without rebuilding the rest of the protection complex;
- turnkey deployment of new information-processing sites — from design to certification.
What this gives different roles in your organisation
- the head of the institution — legitimacy of the solution: the product holds a State Service of Special Communications expert conclusion, and implementation and certification are carried out by an enterprise with TPI licences;
- the head of the IT unit — predictable integration: the composition of the complex and its software are agreed before delivery, and support is provided by the manufacturer;
- the officer responsible for information protection (CISO) — documentary confirmation of compliance for a TPI complex or ICS authorization;
- the security service — a transparent supplier: company details, licences and founding documents are provided on request.
If the specifics of the site allow the use of active protection methods, consider the active-protection configuration — PLASMA-ZARM/AZ. For controlled one-way data transfer between networks of different security levels, the PLASMA DD data diode is used.
How passive protection differs from active
The obligation to protect information against leakage via technical channels for systems that process information constituting a state secret is established by Resolution No. 373 of the Cabinet of Ministers of Ukraine of 29.03.2006 «On approval of the Rules for ensuring the protection of information in information, electronic communication and information and communication systems». This rule applies both to state enterprises and institutions and to bodies under non-state ownership.
Advantages of passive protection
- Information is protected across a wide frequency range.
- A working workstation produces practically no electromagnetic emanations — there are no unmasking signs of the complex on the air: technical intelligence tools cannot establish that a workstation is operating at the site.
- Protection requires no additional actions from the operator.
- The level of protection remains stable when the complex is relocated — it can be used at mobile sites without deploying additional protection tools.
- The level of protection remains stable throughout the entire service life.
- Protection covers leakage via compromising electromagnetic emanations, via acousto-electric conversions, and interception via high-frequency imposition and/or irradiation.
Drawbacks of passive protection
- A higher price of equipment in protected design.
Advantages of active protection
- Relatively lower costs of building the protection system.
Drawbacks of active protection
- The noise generator — a powerful source of electromagnetic radiation — unmasks the place and time of processing restricted information.
- Electromagnetic-compatibility requirements for equipment at the site are violated.
- Protection works only while the tools are switched on, which requires additional operator actions and constant monitoring of the equipment.
- The operation of noise generators affects operators’ well-being, which provokes switching the protection off — including during the processing of restricted information.
- Noise generators have a limited frequency range that does not fully cover the frequency band of informative signals.
Technical specifications
The full specification with exact values, as well as the configuration for a specific site, are agreed with the client and provided on request together with a commercial proposal — leave a request.
Documents and compliance
The product holds a valid State Service of Special Communications expert conclusion No. [TBC], which confirms the complex’s compliance with the requirements of the regulatory documents of Ukraine’s technical information security system. This provides grounds for using PLASMA-ZV-ARM/MONO in TPI complexes and in information and communication systems for which the use of tools with confirmed conformity is mandatory — in particular during ICS security authorization under Resolution No. 712 of the Cabinet of Ministers of Ukraine.
The documents provided with the product and published on this page:
- State Service of Special Communications expert conclusion No. [TBC] — a copy is provided on request;
- the product specification — provided on request;
- the list of regulatory documents against which the assessment was carried out — provided on request.
NVP «Plasmotekhnika» holds licences and permits to carry out works in the field of technical information security (details — [TBC]). To allow the customer’s security service to vet the supplier, we provide on request the full set of founding documents and company details (EDRPOU code — 30023446).
Integration and support
The composition of the complex and its software are agreed with the customer at the design stage — so that the secure workstation integrates into the existing IT infrastructure without breaching the conditions under which the expert conclusion was issued. Questions of compatibility with application software, domain policies and administration tools are handled by our engineering unit together with the customer’s IT service.
As a full-cycle integrator, we cover the entire chain of work around the product:
- site survey and design of the TPI complex;
- supply, installation and commissioning;
- certification and instrumental control;
- warranty and post-warranty servicing.
A separate area is the servicing and modernisation of secure workstations already in operation: periodic monitoring of protective characteristics, repair preserving the protective properties, and hardware upgrades with subsequent confirmation of compliance. The support model and scope of service are fixed by contract; the manufacturer remains the single point of responsibility — from production to modernisation.
To obtain the PLASMA-ZV-ARM/MONO specification, the expert conclusion details and a commercial proposal, leave a request via the form below or call: +38 (044) 204-83-62. An engineer will clarify the task, compare the passive and active configurations if needed, and propose a solution for your site.