Call us now:
In May this year Xplain an IT service provider to several Swiss federal agencies was ransomed. Several weeks on, there is no indication of the full extent of the attack and data leak, however concerns have been identified by some of the sensitive Federal data being held on Xplain systems.
The attack raises very uncomfortable questions that in ones experience are not unusual, when organizations are under a successful cyber attack. Questions as to how and why certain data was being held, why data was not encrypted, what contracts were signed with service provider and what oversight was in place.
One loves the term used in the article ‘Spicy’ to describe the relationship between Xplain and Federal agencies. As the Federal Office of Police, Customs, Military Police and numerous cantonal police forces rely on Xplain software for their operations. Software that has been compromised in a cyber attack.
The attack highlights the need for organisation to be clear on the contracts signed with services providers, roles and responsibilities, clear identification of the data to be handled, its storage and what security practices will be adopted to secure data. A reason why EU NIS 2 and DORA are being adopted by the EU to secure CNI provider, FIs, ICT providers and MSPs.
Ted Dziekanowski Olaf Classen
#cybersecurity #cyberriskmanagement #ransomeware
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7082620529056063488