New Cyber Threat Looming Over Public and Private Organizations in Pakistan, Warns National CERT; Advises Strict Access Controls and Audits for Third-Party Vendors
ISLAMABAD: The National Computer Emergency Response Team (National CERT) issued a security warning to public and private sector organizations in Pakistan, stating that they are under increased risk of cyber attack from third party vendors and external suppliers.
The National CERT has issued a formal warning to organizations nationwide to strengthen their cybersecurity posture to make sure they have a strong defense against any potential data breaches or digital intrusion.
The following are some highlights of the National CERT’s Cyber Security Warning.
Weak Cybersecurity Practices by Business Partners: National CERT reports that the overall digital network of an organization may be vulnerable if its business partners have weak cybersecurity. Access to internal systems, confidential information and security credentials increases cyber attack risks when vendors are given access.
Outside service providers can be the sources of unintended or intentional disclosure of sensitive institutional data if they are not properly vetted, the advisory notes.
Recommended Mitigation Strategies: National CERT has strongly recommended that all institutions perform in-depth security evaluations of vendors and suppliers before entering into a contract with them. In addition, organizations need to ensure that they only allow third parties access when it is necessary and be proactive in monitoring their digital activities to prevent cyber threats.