Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong

Name: Ransomware Attack on the Servers of The Hong Kong Institute of Bankers
Author: Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong

Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (2023)

Summary

“Ransomware Attack on the Servers of The Hong Kong Institute of Bankers”, published in 2023, is a work by Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong. It explores elements such as Vulnerability, data and Servers.

Quotes from Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong)

Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong, Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (2023)

“ Organisations should clearly define the roles and responsibilities of a data protection officer, including monitoring compliance with the Ordinance and reporting to senior management, as well as incorporating data protection issues raised by staff and experiences and lessons on data breach incidents involving customers' personal data into the organisation's training materials. ”

[↩︎]

Source: Wikisource

Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong, Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (2023)

“ The Commissioner appeals to organisations to comply with the data security requirements under the Ordinance by taking all the practicable steps to safeguard the personal data held by them, such as conducting regular scans on internet-facing servers to check for vulnerabilities, and paying attention to potential data security risks posed by vulnerabilities on information systems containing personal data so as to take appropriate remedial actions as early as possible. ”

[↩︎]

Source: Wikisource

Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong, Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (2023)

“ Through this report, the Commissioner would like to make the following recommendations to organisations that handle personal data with the use of information and communications technology (ICT) :- Stay Vigilant to Prevent Hacker Attacks: In the wake of different security vulnerabilities, organisations should always stay vigilant, and conduct regular risk assessments to review the potential impact of hacking on their systems, and enhance the protection of the systems which contain personal data such as servers, customer databases, etc. ”

[↩︎]

Source: Wikisource

Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong, Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (2023)

“ Organisations should formulate data backup policy, conduct regular backup for systems containing important data, and ensure that the recovery mechanism can effectively recover the loss data or inaccessible data due to malicious software/ ransomware. ”

[↩︎]

Source: Wikisource

Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong, Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (2023)

“ The Vulnerability would enable an attacker to bypass security restrictions and directly obtain Secure Sockets Layer Virtual Private Network (SSL VPN) [5] account names and passwords to execute any programme in the target system. According to the Advisory, the Firewall manufacturer urged users to disable SSL VPN immediately until the operating systems were upgraded and all account passwords were reset. Meanwhile, users were recommended to enable multi-factor authentication. ”

[↩︎]

Source: Wikisource

Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong, Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (2023)

“ Data should also be segregated according to its sensitivity and importance, and should be kept safely offline to avoid accidental loss. Monitor Service Providers Properly: When engaging information system service providers to maintain network infrastructure, organisations should first formulate service requirements according to industry best practice or operational guidelines (e.g. to install critical patches for organisations' operation systems and applications) . ”

[↩︎]

Source: Wikisource

Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong, Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (2023)

“ Having considered all the evidence of this investigation, the Commissioner considered that HKIB:- failed to effectively manage data security risks, including failing to formulate patch management procedures, which resulted in the failure to patch the Vulnerability in a timely manner, thus allowing the hacker to successfully intrude into the system through the Vulnerability and encrypt the Servers ”

[↩︎]

Source: Wikisource

Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong, Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (2023)

“ This work is released under the Creative Commons Attribution 4.0 International license, which allows free use, distribution, and creation of derivatives, so long as the license is unchanged and clearly noted, and the original author is attributed. ”

Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong

Summary

Quotes from Ransomware Attack on the Servers of The Hong Kong Institute of Bankers (Portal:Office of the Privacy Commissioner for Personal Data, Hong Kong)

Common terms

Similar works

Get perspective with Kwize: daily news enlightened by great literature