NCSC Suggests to Reconsider Russian Supply Chain Risks

This article has been indexed from

CySecurity News – Latest Information Security and Hacking Incidents

 

One of the UK’s top security agencies has encouraged the public sector, critical infrastructure (CNI), and other institutions to rethink the hazards of any “Russian-controlled” elements of their supply chain. 
There is no evidence that the Russian government is preparing to compel private providers to harm UK interests, according to Ian Levy, technical director of the National Cyber Security Centre (NCSC). That doesn’t rule out the possibility of it happening or happening in the future, he continued. 
“Russian law already contains legal obligations on companies to assist the Russian Federal Security Service (FSB), and the pressure to do so may increase in a time of war. We also have hacktivists on each side, further complicating matters, so the overall risk has materially changed. The war has proven many widely held beliefs wrong and the situation remains highly unpredictable. In our view, it would be prudent to plan for the possibility that this could happen. In times of such uncertainty, the best approach is to make sure your systems are as resilient as you can reasonably make them,” Levy argued. 
All UK public sector organisations, those supplying services to Ukraine, CNI enterprises, organisations performing the activity that could be regarded as being in opposition to Russian interests, and high-profile institutions whose compromise would be a PR success for the Kremlin are all covered by the new NCSC guidelines. 

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

Read the original article: