Cyberincident reporting needs to be quicker

The Swiss Federal Audit Office reviewed the effectiveness of the cyberinicident management process. In particular, the audit focused on issues relating to the timely flow of information from the sources to the Center, and on the processing this information with the Centre's own monitoring results. In addition, the detection of cyberincidents and the timely implementation of measures, as well as the flow of information to the relevant units, was assessed.

Audit of the effectiveness of incident management in protecting federal ICT from cyber-risks

CH 2022: Information security

Be prepared for breakdowns

Danish NAO underlines that public authorities depend on IT to deliver their services. Thus, major IT problems and loss of data relating to critical IT systems can have far-reaching consequences for the government, citizens and companies. The audit focused on IT contingency plans, secure continuity of operations and mitigation of the consequences of system breakdowns or data losses in the event of major IT breakdowns.

Cyber security resilience of the Danish public sector II

DK 2023: Information security

Upgrade or decommission

Servers are essential part of IT infrastructure. At the same time, they are vulnerable to cyberattacks, because they can be exploited by hackers to gain unauthorized access to the system and steal sensitive information, corrupt data, or cause systems to malfunction. Once the security of a server is compromised, attackers can gain access to other computers and servers across the network. Danish auditors paid attention to risky stages of servers lifecycle.

Security of servers managed by the Danish Agency for Governmental IT Services

DK 2023: Information security

Coordination of Information Protecting system

The UK National Audit Office noticed that in recent years, cuts to departmental budgets and staff numbers, and increasing demands from citizens for online public services, have changed the way government collects, stores and manages information. Concurrently, the threat of electronic data loss from cyber crime, espionage and accidental disclosure has risen considerably. The NAO’s audit results in emphasising role of the whole system coordination.

Protecting information across government

UK 2016: Information security

Completing leadership and oversight requirements

GAO continues to review and report status of information security - the high-risk area for more than 25 years already. Special focus is on federal cybersecurity challenges.

CYBERSECURITY: Implementation of Executive Order Requirements Is Essential to Address Key Actions

US 2024: Information security