en.Wedoany.com Reported - The Polish Government Plenipotentiary for Cybersecurity (Pełnomocnik Rządu ds. Cyberbezpieczeństwa) has issued a security recommendation regarding the management of edge devices in telecommunications and ICT networks.
Edge devices are among the most common targets of cyberattacks and can lead to the paralysis of critical infrastructure. The recommendation states that comprehensive security measures are necessary to reduce the risk of security incidents involving edge devices. Entities within the national cybersecurity system should maintain a current inventory of edge devices, their software, connections, and public services, conduct regular audits and inventory updates, and establish procedures for device replacement and post-incident recovery. Devices whose manufacturers have ceased development and support should be replaced.
Regarding access management, it is recommended that device management access be disconnected from the internet, remote services be minimized, and communication be conducted via VPN. Management panels should only be accessible from trusted IP addresses and employ strong authentication. Configuration should include network segmentation, traffic filtering between segments, and secure password storage. Monitoring measures must cover regular account checks, alerts, and logs, which should be exported to dedicated devices, as well as testing of backups and access rule controls. Devices should be placed in protected racks with restricted physical access and equipped with redundant power supplies and UPS. The recommendation does not specify which particular devices must comply with these rules.
As of the end of the first week of July this year, the Government Plenipotentiary for Cybersecurity has issued a total of 16 recommendations concerning solutions from companies such as Fortinet, Palo Alto Networks, Cisco, Kaspersky, Zimbra, and Roundcube. The most common content in these recommendations is software updates, with some involving the elimination of individual solutions.
