Newsletter n1_2011 PDF Stampa E-mail

News. BBC web site reports recent EU data on spread of viruses on computers and smartphones. Italy is at the fourth place in the list of most hitten countries. The 2010 figures, released by the EU's statistics office to mark Internet Safety Day, show the safest countries were Austria and Ireland. The figures also detail financial losses online.  They show that 3% of net users in the 27 EU states lost money due to phishing attacks or fraudulent payments.  The survey covered more than 200,000 computer users across the 27 countries in the European Union and was conducted during the second quarter of 2010.

EU countries with highest virus infections
Bulgaria (58%)
Slovakia (47%)
Hungary (46%)
Italy (45%)
Estonia (43%)

(source: bbc.co.ouk) 

Also smartphones are attacked. This because of their diffusion. The first conclusion that comes to our minds, is that there is the need for a more ample and deep awareness programme. Some of the most frequent weaknesses are: antivirus software and antimalware not timely updated; access to not “recommended”  web sites (“XXX”, unknown sites,  etc.); etc. The worst thing is that, in spite of all wornings by the banks and consumer associations, the average user still do not recognize a phishing attack and gives his/her credentials to the criminals. Our “anti phishing attacks observatory” is collecting what is being done in other countries (UK, France, Germany, France, Austria, etc.) and will send a report to our members  

RFID cards under attack. 

Our observatory recommends software developers to be aware of virus injection through RFID cards created by hackers.The damage is made possible due to weaknesses in programming style followed by some programmers.The RFID bogus responds to the read action by giving back a programming language recognizable instruction that will make a damage (e.g.: stopping a database) or open a door to a virus or trojan.  

Business Continuity: the scope. 

  The last issue of the Business Continuity Magazine (www.thebci.org) contains an interesting article on errors done when establishing the scope of the Business Continuity Management System (BCMS).


What is interesting in the article, is that the Author raises the problem that there is not much time dedicated to the identifying and getting management approval on the scope of the BCMS (Business Continuity Management System), and list some of the possible consequences.


The scope is about the output and defines the destination before the journey starts.


The possible consequences are: excessive number of information collected; not strictly needed stakeholders are contacted; time consuming meetings with internal functions on issues like risk management, incident and emergency management; long discussions and debates take place on how to face fires, floods, or bombs; etc.


BCPs are a set of instructions on how to continue or recover what is identified as a time critical function in the BIA.
And the information needed are “only those you can do something with”.


What the Business Continuity Manager must do, is to assure the shareholders that the critical processes are recovered within the Maximum Tolerable Period of Disruption defined.  

 


Copyright © 2010 ANSSAIF - Template created by Davide Calignano.