Poland to publicly name companies negligent in cybersecurity

Polish Deputy Prime Minister and Minister of Digital Affairs, Krzysztof Gawkowski, has announced a shift in the state's approach to cybersecurity. Speaking at the Cyber24 Days conference, Gawkowski stated that the government will begin publicly naming companies that fail to implement adequate security measures and are responsible for cyber incidents due to negligence. He emphasized that digital security is a management responsibility, not just a task for IT departments, and should be a priority for boards and executives.

The scope of the National Cybersecurity System is also expected to expand significantly, growing from approximately 1,000 to 65,000 entities.

In a related discussion on the realities of cyberattacks, Magnus Jelen, incident response director at Coveware, highlighted the intense pressure faced by leadership during ransomware attacks. Jelen warned that paying ransoms is an absolute last resort, as it does not guarantee the recovery of data or the deletion of stolen information by criminals. He noted that many modern attacks focus on extortion through the threat of leaking sensitive data rather than just encrypting files.