Police Scotland has issued a guidance alert with information on actions that can be taken by groups and organisations to mitigate cyber risks, in light of the recent cyber incidents in Ukraine.
The alert includes guidance from the National Cyber Security Centre (NCSC), the UK’s technical authority on cyber security.
While the NCSC is not aware of any current specific threats to UK organisations in relation to events in and around Ukraine, the guidance, endorsed by Police Scotland and the Cyber Scotland Partnership, encourages organisations to follow steps that reduce the risk of being impacted by cyber-attacks, including:
- patching systems
- improving access controls and enabling multi-factor authentication
- implementing an effective incident response plan
- checking backups and restore mechanisms are working
- disabling non-essential ports and protocols
- strengthening controls for cloud services
- running antivirus software
- ensuring that online defences are working as expected
- keeping up to date with the latest threat and mitigation information
For further information, please view or download the guidance alert as a pdf.