Metropolitan Police Urged to Investigate Cyber Security Practices Following IT Breach
Industry experts are calling for a thorough investigation into the cyber security practices of the Metropolitan Police after an IT breach. Scotland Yard announced on Saturday that they had been alerted to “unauthorised access to the IT system of one of its suppliers.” The supplier in question had access to sensitive information including names, ranks, photos, vetting levels, and pay numbers of officers and staff. The force is currently working with the company to determine if there has been a security breach and the extent of the potential impact.
Cyber security experts have expressed concern over the incident, stating that it is not surprising as cyber attackers often target third-party companies. Jake Moore, global cyber security adviser for software firm ESET, described the breach as “extremely worrying” and highlighted the need for police forces to strengthen their security measures. He suggested that the breach appears to be a targeted attack aimed at testing the security within the supply chain. Moore emphasized the importance of understanding where all data is located and who has access to it in order to prevent such incidents.
Kevin Curran, professor of cyber security at Ulster University, agreed that the breach is likely due to a third-party supplier issue. He emphasized the need for organizations to allocate resources to cyber security and follow best practices and guidelines in the industry. Curran suggested conducting an external audit to assess whether the Met is implementing these practices effectively.
The incident serves as a reminder for police forces to prioritize cyber security and address any vulnerabilities in their systems. By taking proactive measures and allocating resources to mitigate risks, organizations can better protect sensitive information from potential breaches.