Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Stakeholders / Everyone with PHP in the path / Organisations running PHP / Governments and public services
Governments and public services: its risk register
Ministries, agencies and councils: the Netherlands, Finland and Latvia took services offline; UK councils and the Met Police were unavailable.
Kind group · Assigned here 1 · In its register 3 · in the story as The Dutch government and NCSC-NL, Valtori and NCSC-FI
The register
Assigned here, or arriving through a part of this stakeholder. The part played is the one recorded for whoever holds the assignment.
| Risk | Rating | Kind | Part played | Controls |
|---|---|---|---|---|
| R04 Services lost to precautionary shutdowns | 20 critical | Operational | owner | ISO/IEC 27001 A.5.29, ISO/IEC 27001 A.5.30, NIS2 Art.21(2)(c), DORA Art.11 +2 |
| R04-1 National government services offline | 20 critical | Operational | through National governments (owner) | NIS2 Art.21(2)(c), ISO/IEC 27001 A.5.29, NIST CSF 2.0 RC.RP-01 |
| R04-2 Councils and police offline without saying why | 15 high | Reputational | through Local councils (owner) | Cyber Essentials SUM, NIST CSF 2.0 RS.CO-03, ISO/IEC 27001 A.5.24 |
Where its risks sit
Its parts
- Local councils: 1 risks
- National governments: 1 risks
The standards its register touches
ISO/IEC 27001 (3), NIST CSF 2.0 (2), NIS2 (1), DORA (1), NIST SP 800-53 (1), Cyber Essentials (1)