How Public Authorities and Administrations Strengthen Their Cybersecurity

Cybercrime: A Growing Threat for Public Bodies

Local authorities are increasingly being targeted by cybercriminals. A particularly serious case occurred at the end of October 2023, when Südwestfalen-IT (SIT), a municipal IT service provider for over 70 cities and municipalities in North Rhine-Westphalia, fell victim to a ransomware attack.

The effects were far-reaching:

• Over 100 municipalities were affected, including all towns and municipalities in five districts as well as other municipalities in the Ruhr region and southern Münsterland.
• Numerous municipal services were unavailable, from vehicle registration to registry office services.
• Even the Nora app for emergency calls was temporarily unavailable.
• It took months to restore the systems and data, with considerable consequences for the administrations’ ability to work.

Unfortunately, this is not an isolated case. According to BSI situation report (2023), at least 27 German municipalities were affected in the reporting period, including city and district administrations, local transport companies, energy suppliers, and more. Millions of citizens experienced sometimes drastic cuts.

This highlights the need for robust IT security measures and effective crisis communication in the public sector. It also shows how important it is to have alternative communication channels such as Teamwire available to remain capable of acting in an emergency.

How Can Your Authority Improve Its Cybersecurity?

Review Existing Security Policies

To increase data security and be prepared for emergencies, you should first review your existing security guidelines. Consider how these can be improved, formulated more clearly, or implemented comprehensively. Regularly check the current status to be able to react to new threats and tactics.

Technical Security Measures

The technology used plays a central role in your security architecture: implement technical security measures for all devices and applications in your authority. Implement a zero-trust architecture, which assumes that no user or device is automatically trustworthy, regardless of its position in the network.

In addition, carry out regular penetration tests and vulnerability analyses to proactively identify and close potential security gaps.

Cooperation and Collaboration

An authority is not alone. Plan in advance how cooperation with other authorities can proceed safely or be maintained in an emergency. It is advisable to coordinate and link fail-safe software solutions. Also, use cooperation with cybersecurity authorities such as the BSI to benefit from the latest findings and best practices.

Up-To-Date Software

Software is only secure if it is up-to-date: outdated programs and missing updates offer points of attack for cybercriminals. Therefore, always use up-to-date and well-maintained technologies to continuously implement all necessary security measures.

Training and Security Culture

People remain the most important factor for the cybersecurity of your authority. Provide your employees with comprehensive training and regularly review what they have learned. This cybersecurity training will make your team resistant to threats such as phishing. Also, promote a security culture in which cybersecurity is perceived as a shared responsibility.

Crisis Communication and Emergency Management

In the event of a cyberattack, securing communication is crucial. Use a fail-safe communication channel, for example, a cloud-based messenger. Also, set up a well-thought-out emergency management system. Clearly defined responsibilities and tasks will enable your team and partners to respond to and manage a crisis more efficiently. Develop and regularly practice a detailed incident response plan for various cyberattack scenarios.

Additional technical measures

Introduce multi-factor authentication (MFA) for all user accounts, especially for privileged access. Encrypt sensitive data both at rest and in transit. Segment your network into separate areas to contain the spread of threats. Implement systems for real-time monitoring and logging of network activities to detect suspicious activities at an early stage.

Backups and Disaster Recovery

Regular backups and disaster recovery tests are essential. Make sure that your data is backed up reliably and that the recovery processes work smoothly in the event of an emergency. You can find a comprehensive guide here.

Choose the Right Software for More Cybersecurity

Choosing the right software is crucial for the day-to-day work and security architecture of your authority. Not every solution is suitable for the public sector. Make sure that the software you select complies with all legal requirements and offers high security standards.

Data Sovereignty and Access Rights

An important point is data sovereignty: suitable software enables you to keep all data secure and control access. Functions for managing access rights and monitoring data communication are essential.

Compatibility and Usability

The software should also be compatible with other programs and have API interfaces to ensure seamless integration into your IT infrastructures. This is particularly essential in crises. Rely on user-friendly software that enables intuitive operation. High usability and user competence reduce the risk of security-related errors.

Conclusion

Advancing digitalization and increasing threats from cybercrime pose major challenges for public administrations and authorities. Risks can be effectively minimized by implementing robust security guidelines, applying technical security measures, and regularly training employees.

Choosing the right software and using secure communication platforms are also crucial to remain capable of acting in the event of an emergency. With a well-thought-out cybersecurity strategy and comprehensive emergency management, your authorities will be better prepared to meet the challenges of the digital world. By continuously adapting and improving security measures, you can strengthen the cyber resilience of your authority in the long term and thus ensure the ability to work and the protection of sensitive data.