The National Computer Emergency Response Team (National CERT) has issued an advisory warning public and private organizations across Pakistan about a growing risk of cyber attacks routed through third-party vendors and suppliers, urging them to strengthen cybersecurity arrangements.
The advisory states that business partners with weak security controls can expose the digital systems of an organization to compromise, because vendors are often given access to internal systems, data and security credentials.
It adds that such access increases the likelihood of cyber attacks, while sensitive information may also be leaked through external service providers that handle the data of an organization on its behalf.
National CERT recommended that organizations review the security arrangements of every vendor or supplier before engaging them, and that they restrict third-party access strictly to what is required for the assigned work.
The agency also advised organizations to monitor vendor activity on a regular basis, so that suspicious behavior can be detected early and cyber threats can be prevented before they cause serious damage.
