Strategic Networks: Cyber-Resilient and Crisis-Resistant

About the job

Switzerland's digital vulnerability has been increasing for years. Accordingly, strategic networks are coming more into focus. These must be efficient, crisis-resistant, and secure. How authorities ensure their network security without having to forgo flexibility is explained in this blog post.

The steadily increasing electronic exchange between authorities and the population, as well as the interdepartmental collaboration within administrations, is only possible if the security and resilience of data exchange are guaranteed. Accordingly, the requirements for a modern network infrastructure are high – both in the civilian sector and in the various military operational spheres. The data in strategic networks must be available in real time and constantly – that means also in crisis situations within the operational network. At the same time, the demands on the flexibility of the networks and a cost-efficient operation are high. However, network security must not suffer as a result.

Increasing Cyber Attacks and Supply Chain Risks

The dependence on information and communication technologies is growing, and so is Switzerland's vulnerability. If authorities continue to meet the increased demands and also consider trends such as remote work, hybrid work, and home office, the potential attack surfaces also increase.

In addition to the rise in attacks such as ransomware, where data is encrypted and ransom is demanded, the dangers from the supply chain have also become a security factor of growing importance. Hardware and software can already be compromised at the manufacturer. It is also possible for new backdoors to be introduced via updates. Such cases should be increasingly focused on in network security risk management.

The cyber threats to federal, cantonal, and municipal authorities, as well as operators of critical infrastructures and associated cyber-physical systems, are higher than ever today. The Federal Council has recognised this as well. Its decision to create a dedicated federal office for cyber security is likely directly related to this.

Quantum-Secure Protection of Strategic Networks

Fundamentally, all organisation-critical systems such as strategic networks and the data exchanged within them must be protected against unauthorised access. Otherwise, they can be intercepted, altered, or the exchange disrupted. This means the confidentiality, integrity, and availability of sensitive data are at stake. Through copying, manipulation, or publication of data, the state, government organisations, officials, and citizens can be compromised, and critical infrastructures impaired or paralysed.

With the advancing digital communication in administrations comes a strong professionalisation of attacks. State or private cyber actors and cyber criminals are now professionally organised and equipped with the necessary resources. Conventional defence measures are ineffective against this. The only reliable remedy against attacks on strategic networks is a sustainable and crisis-resistant security architecture.

A comprehensive security architecture ensures that a consistent zoning model is implemented in hardware, firmware, and software. CyOne Security has many years of experience in developing specialised hardware platforms and corresponding firmware for the quantum-secure protection of data transported over public networks using OSI Layer 1-3 network protocols. It also possesses unique knowledge about the separation and segregation of data and the storage and management of security-relevant data such as keys.

CyOne Security's network security portfolio supports the protection of data on Layer 1 (OTN up to 100G) as well as Layer 3 (IP VPN up to 1G).

Crucial for sustainable cyber resilience of networks is also the maintenance (e.g., updates, patching) and secure management of devices in operation throughout their entire lifecycle. Here, CyOne Security offers integrated and secure management solutions that help customers operate their networks securely and long-term.

CyOne Security understands the high requirements for network security in the government environment and supports the federal government, cantons, municipalities, and critical infrastructures throughout the entire system lifecycle with project-specific security services: analysis, conception, design, development through to implementation, operation, and migration.