How authorities can protect themselves against cyberattacks

Digitisation of administration: between opportunity and risk

• addresses,
• marital status and religion,
• ID card numbers and identification numbers (e.g. tax numbers). 

This data is particularly valuable for attackers since it can be used to capture complete identities. 

The digitalisation of public institutions and authorities is in full swing:
Public administration has become increasingly networked in recent years. If one system is broken into, it can also be "poached" in systems of other administrations and malware can spread extensively and fast.

The electronic offer to citizens or communication with authorities via online portals has been significantly expanded in recent years. In some cases, only the electronic way of submitting data is still offered. 

In many areas, however, the modernisation of computer and operating system equipment has not yet been completed. Until then, there are still weak points which, if patches are not applied, become a gateway for hackers. Authorities are obliged to comply with the legal provisions of the data protection regulations (e.g. GDPR in the European Union, APP - Australian Privacy Principles) and individual country-specific standards for cyber security, e.g. the Essential Eight Maturity Model in Australia. In addition, in various countries, eGovernment laws are in place which regulates the duties of the authorities and requires protection concepts and mechanisms for their digital systems.

Why is the public sector particularly lucrative for attacks?

• In public institutions, numerous extremely sensitive personal data are stored in electronic files
• Administrative procedures are becoming increasingly digital
• The information offers profit-oriented cyber organisations a lucrative breeding ground for data manipulation, identity theft and misuse
• The confidentiality of data and information, e.g. in police and ministries
  
  

What are the requirements regarding data processing and data security?