North Macedonia Pension Fund faces IT security risks

A report by the State Audit Office (SAO) has identified significant vulnerabilities in the information security systems of the Pension and Disability Insurance Fund (PIOM) in North Macedonia. The audit revealed critical weaknesses, including outdated IT infrastructure, the absence of a comprehensive cybersecurity strategy, and unapproved incident response procedures.

A major concern highlighted by auditors is a severe shortage of specialized personnel. Out of 57 systematized positions in the IT sector, only 13 to 17 have been filled, representing roughly 30 percent of required capacity. Specifically, the IT Infrastructure and Support Department reportedly had only one employee out of 13 required positions, with no staff dedicated exclusively to information security.

In response, PIOM asserts that personal data of pensioners and insured persons has not been compromised. The Fund claims that many of the identified gaps are being addressed, attributing the systemic issues to “unhomely, irresponsible, and neglected management” prior to September 2024. PIOM stated that investments in strengthening cybersecurity, including modern detection and monitoring systems, are planned for 2025 and 2026.