T\u00eb gjith\u00eb e dim\u00eb tashm\u00eb se Shqiperia po p\u00ebson sulmin e te disat\u00eb kibernetik ndaj privat\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave t\u00eb qytetar\u00ebve. Lajmi gjendet n\u00eb t\u00eb gjitha mediat.<\/p>\n
Dikush ka hyr\u00eb n\u00eb pron\u00ebsi t\u00eb list\u00ebs (databaz\u00ebs) s\u00eb pagave t\u00eb mbi 600.000 qytetar\u00ebve. Jemi p\u00ebrpara nj\u00eb sulmi t\u00eb fuqish\u00ebm dhe t\u00eb paprecedent\u00eb t\u00eb nj\u00ebr\u00ebs prej t\u00eb drejtave themelore t\u00eb individ\u00ebve: Privat\u00ebsis\u00eb.<\/p>\n
Nd\u00ebrsa faqja online e Agjencis\u00eb s\u00eb Prokurimit Publik (app.gov.al) nuk resht s\u00eb publikuari thirrje p\u00ebr tenderime t\u00eb k\u00ebtij apo atij standardi nd\u00ebrplanetar (ISO 9001, ISO 27001, ISO 27701 etj.), jo m\u00eb larg se para pak dit\u00ebsh ai prej 890.000 eurosh p\u00ebr trajnimin e personelit t\u00eb Albcontrol, institucionet nuk zbatojn\u00eb as rregullat m\u00eb elementare t\u00eb menaxhimit t\u00eb t\u00eb dh\u00ebnave.<\/p>\n
Keqmenaxhimi i t\u00eb dh\u00ebnave t\u00eb qytetar\u00ebve ndodh r\u00ebndom p\u00ebrdit\u00eb n\u00eb vendin ton\u00eb. I paprecedent\u00eb \u00ebsht\u00eb volumi i t\u00eb dh\u00ebnave dhe emrat q\u00eb ndodhen n\u00eb k\u00ebt\u00eb databaz\u00eb (nga presidenti, kryeministri e deri tek qytetari m\u00eb i fundit).
\nRreziku zero nuk ekziton (si\u00e7 nuk ekziston n\u00eb asnj\u00eb aktivitet njer\u00ebzor), administrata publike n\u00eb thelb ndahet n\u00eb dy kategori t\u00eb gj\u00ebra: ata q\u00eb kan\u00eb nj\u00eb certifikat\u00eb dhe kan\u00eb p\u00ebsuar tashm\u00eb nj\u00eb sulm t\u00eb suksessh\u00ebm kibernetik dhe ata q\u00eb nuk e kan\u00eb p\u00ebsuar ende.<\/p>\n
Ne sugjerojm\u00eb<\/p>\n
Tema reale, n\u00eb kt\u00eb dhe t\u00eb gjith\u00eb situatave t\u00eb tjera t\u00eb data breach t\u00eb administrat\u00ebs publike, q\u00ebndron n\u00eb parandalimin dhe reagimin.<\/p>\n
Parandalim q\u00eb do t\u00eb thot\u00eb jo vet\u00ebm pajisje me certifikata t\u00eb dor\u00ebs s\u00eb dhjet\u00eb nga tendera me kritere fantastikoshkencor\u00eb, por p\u00ebrshtatje, pa pritur p\u00ebrafrimin legjislativ, e t\u00eb gjith\u00eb sektorit publik me Rregulloren e BE \u2013 GDPR 679\/16 nga pik\u00ebpamja formale, dokumentacionale dhe procedurale: pra p\u00ebrdit\u00ebsimi i vazhduesh\u00ebm, trajnimi i stafit, konfigurimet e serverave, softuer\u00ebt mbrojt\u00ebs, prania e kopjeve rezerv\u00eb adekuate dhe t\u00eb p\u00ebrdit\u00ebsuara, elasticiteti i sistemit, politika BYOD, navigimi i sigurt dhe \u00e7do mas\u00eb tjet\u00ebr teknike q\u00eb konsiderohet e p\u00ebrshtatshme duhet t\u00eb kaloj\u00eb n\u00ebn monitorimin e DPO (Data Privacy Officer) kompetent\u00eb dhe jo t\u00eb improvizuar duke p\u00ebrshtatur mikun e radh\u00ebs.<\/p>\n
Reagim do t\u00eb thot\u00eb: secili duhet t\u00eb dij\u00eb \u00e7far\u00eb duhet t\u00eb b\u00ebj\u00eb dhe t\u00eb veproj\u00eb n\u00eb koh\u00ebn m\u00eb t\u00eb shkurt\u00ebr, pra pajisja me nj\u00eb policy t\u00eb nj\u00eb disaster recovery (terminologjia \u00ebsht\u00eb teknike p\u00ebr k\u00ebt\u00eb dhe lihet n\u00eb anglisht) t\u00eb miratuar dhe t\u00eb testuar m\u00eb par\u00eb p\u00ebr t\u00eb reaguar ndaj sulmit.<\/p>\n
P\u00ebrve\u00e7 uljes s\u00eb rreziqeve t\u00eb k\u00ebtyre sulmeve t\u00eb kemi dhe nj\u00eb panoramik\u00eb mbi emrat konkret\u00eb t\u00eb p\u00ebrgjegj\u00ebsve q\u00eb neglizhojn\u00eb, keqmenaxhojn\u00eb ose tradhtojn\u00eb besimin e qytetar\u00ebve kur dor\u00ebzojn\u00eb t\u00eb dh\u00ebnat e tyre pran\u00eb administrat\u00ebs publike.<\/p>\n
Si p\u00ebrfundim, alarmi i k\u00ebtij sulmi nuk q\u00ebndron vet\u00ebm n\u00eb vet\u00eb sulmin por edhe n\u00eb m\u00ebnyr\u00ebn se si Qeveria do t\u00eb jet\u00eb n\u00eb gjendje ta p\u00ebrballoj\u00eb dhe t\u00eb reagoj\u00eb.
\nN\u00ebse nes\u00ebr administrata publike do t\u00eb vazhdoj\u00eb t\u00eb pajiset me copa letre pa implementuar rregulloren m\u00eb t\u00eb p\u00ebrparuar p\u00ebr menaxhimin e t\u00eb dh\u00ebnave t\u00eb qytetareve, do t\u00eb gj\u00ebndemi p\u00ebrball\u00eb pasojave jasht\u00ebzakonisht t\u00eb r\u00ebnda (dhe at\u00ebher\u00eb do t\u00eb mund t\u00eb flasim p\u00ebr nj\u00eb sulm vert\u00ebt\u00eb “t\u00eb paprecedent\u00eb”) ose, si\u00e7 \u00ebsht\u00eb b\u00ebr\u00eb p\u00ebr data breach-et e tjer\u00eb t\u00eb sektorit publik do ta trajtojm\u00eb si shum\u00eb zhurm\u00eb p\u00ebr asgj\u00eb, nj\u00eb \u00e7erek ore e keqe dhe skandali i radh\u00ebs do t\u00eb mbuloj\u00eb jehon\u00ebn e rreziqeve q\u00eb do t\u00eb induktoj\u00eb kjo sjellje.<\/p>","protected":false},"excerpt":{"rendered":"
T\u00eb gjith\u00eb e dim\u00eb tashm\u00eb se Shqiperia po p\u00ebson sulmin e te disat\u00eb kibernetik ndaj privat\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave t\u00eb qytetar\u00ebve. Lajmi gjendet n\u00eb t\u00eb gjitha mediat. Dikush ka hyr\u00eb […]<\/p>\n","protected":false},"author":1,"featured_media":26549,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[93],"tags":[],"class_list":["post-26303","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lajme"],"_links":{"self":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts\/26303","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/comments?post=26303"}],"version-history":[{"count":1,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts\/26303\/revisions"}],"predecessor-version":[{"id":26362,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts\/26303\/revisions\/26362"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/media\/26549"}],"wp:attachment":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/media?parent=26303"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/categories?post=26303"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/tags?post=26303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}