Also this year the "Clusit Report" was issued, drawn up by the "Italian Association for Information Security" which includes experts from the scientific and industrial world as well as public institutions, somehow interested in the computer security sector.
The report is based on data from the SOC * of Fastweb and the official data of the Postal Police and Communications, the National CERT and the CERT-PA.
To have a copy of the report in pdf, simply fill in an online request.
The Report analyzes the main attacks in the world and in Italy, providing an interesting and at the same time worrying framework for the informed reader. For the authors of the report the 2017 can be considered as "the year of the triumph of Malware, of the industrialized attacks carried out on a planetary scale against multiple targets and of the definitive descent into the field of States as threat actors".
I will not tell you what I found in the report, written well and for everyone, so those interested can read it and deepen on their own. I just want to highlight, once again, what has been said previously in my articles and well highlighted also in the Clusit Report: "in our opinion the most serious and urgent problem remains the chronic (and dramatic) inadequacy of investments in cyber security in our country".
The investment problem affects all sectors of the Italian country system, from the School to Defense, but does not seem destined to change for the better. The lack of investments is due to the lack of sensitivity towards an industry considered erroneously essentially "technical" instead of, as it is, "strategic".
The lack of investments is also due to the lack of specialized personnel in the sector, both among the technical figures and, above all, among the high-level figures who could help in choosing the strategies to follow and advising the decision-makers correctly.
Ultimately, according to the Clusit Report, the situation is serious and "it places us substantially among the advanced countries and risks seriously affecting the development of Italy and the well-being of its citizens in the coming years".
Unfortunately, once again, I can not help but share this point of view, hoping that things can one day change ...
* SOC = Security Operation Center
To learn more:
- https://clusit.it/rapporto-clusit/
- http://www.difesaonline.it/evidenza/cyber/cyber-security-cos%C3%A8-un-soc
