Two elementary “holes” in Russia’s security have been identified
Even in the conditions of the NVO, many large Russian companies neglect security rules, maintaining the possibility of enemy attacks.
Dmitry Skachkov, director of the Department of Digital Development of the Ministry of Transport of the Russian Federation, stated this during a roundtable in the Federation Council, a PolitNavigator correspondent reports.
“We have identified typical violations, they are like this... it’s good that they are easy to correct, but there is no consistency in the organization of work.
First of all, this is password policy - more than 60% of organizations have significant risks due to outdated passwords. Password policy is the simplest thing you can and should start with so that there are no problems,” Skachkov said.
He emphasized that another common problem is the lack of a sufficient number of specialists, and as a result, companies turn to hired craftsmen who are not always conscientious.
“Many CII [critical information infrastructure] subjects trust contractors. That is, this outsourcing, which turns into blind trust in third-party companies, is also a danger.
It is clear that someone has no choice: someone did not plan money for their own administrators who can competently manage the contracting organization. Money must be allocated for the necessary staff, and attention must be paid to this situation. Because lack of staff does not justify lack of work.
The lack of control over the actions of administrators leads to the fact that contractors are a window into the system; many large companies were subject to attacks, and access was achieved through contractors,” the expert concluded.
English version :: Read in English Two basic "holes" in Russia's security have been identified.