Damianou: Public sector strengthening cybersecurity despite shortfalls

The public sector in Cyprus has been strengthening its cybersecurity, according to Deputy Minister of Research, Innovation and Digital Policy Nicodemos Damianou.

Speaking to MPs on 20 March, he explained, among other things, that for the first time there is a provision of €8.5 million in the budget for dealing with cyberattacks, adding that since last October, cybersecurity has been enhanced in 11 critical systems. 

Both the Deputy Minister and representatives from other relevant authorities spoke during the discussion at the parliamentary audit committee, that a possible cyberattack on public services could have a huge direct and indirect cost for the economy while they also referred to the ongoing challenges despite recent efforts to enhance cybersecurity.

As he said, while progress has been made in coordinating responsible agencies and an €8.5 million has been allocated in the state budget for cybersecurity measures, significant gaps remain due to years of inaction. Moreover, the Digital Security Authority (DSA) has yet to secure an approved budget for 2025.

Aligning security systems will take time

Speaking before the Committee, the Deputy Minister noted that for decades, there had been no upgrade of public sector technological infrastructure, nor a unified security framework. This has resulted in an outdated and vulnerable environment. He stressed that aligning security systems would take time, although security mechanisms are being continuously added.

The government has initiated more than 30-40 projects aimed at improving both functionality and security. Referring to the direct costs of the 2023 cyberattack on the Department of Lands and Surveys, he said that restoration expenses amounted to €136,600. However, assessing the indirect financial impact of cyberattacks is an extremely complex task. Following these attacks, resources were drawn from the European Cybersecurity Organization, leading to 31 penetration tests that identified system weaknesses.

Raising awareness among citizens and businesses

The Deputy Minister also discussed efforts by the DSA and the Commissioner of Communications to raise awareness among citizens and businesses. A cybersecurity manual for the public sector is currently being prepared, pending input from relevant authorities.

He added that in response to last October's attacks, cyberdefence mechanisms have been strengthened in 11 critical systems, along with enhanced security for users, servers, and telecommunications infrastructure.

"Most importantly, for the first time, we have allocated a significant €8.5 million in the budget for strengthening cybersecurity mechanisms," he said.

Deputy Communications Commissioner Petros Galides said that over the past two years, DSA's costs for handling public sector cyberattacks reached approximately €400,000, excluding infrastructure-related expenses.

One of the most significant threats to the economy

He stressed that the Council of Economy and Competitiveness has recognised cyberattacks as one of the most significant threats to the economy. He also noted the substantial progress made in Cyprus, despite decades of inaction that left gaps in preparedness compared to the private sector.

DSA Director Antonis Antoniadis revealed that the authority currently lacks an approved budget, with temporary funding mechanisms already exhausted. This could leave employees unpaid by March. He also pointed out slow staffing processes for permanent positions, despite ongoing efforts to secure approvals for critical roles.

Despite these challenges, Antoniadis praised inter-agency collaboration and noted that Cyprus ranks above the EU average in cybersecurity readiness.

(Source: CNA)