Nasscom Urges IT Firms to Enhance Cybersecurity Amid Middle East Tensions
Nasscom's Advisory for IT Companies
New Delhi, March 9: The National Association of Software and Service Companies (Nasscom) has issued a crucial advisory to its member organizations, emphasizing the need for increased vigilance and preparedness in their business continuity and cybersecurity strategies due to the changing geopolitical landscape in the Middle East.
While current business operations are stable, companies are taking proactive measures to review their contingency plans and enhance resilience to avoid potential disruptions should the situation worsen, according to the advisory.
Nasscom noted that many firms have started to activate or reassess their business continuity strategies for operations related to the affected regions, ensuring that service delivery remains uninterrupted in case of regional disturbances.
Employee safety is also a priority, with organizations enabling remote work for staff in impacted areas and closely monitoring the evolving situation.
Additionally, companies are exploring alternative infrastructure solutions to bolster the resilience of their cloud services and data centers in the region, thereby protecting critical systems.
The advisory further recommends limiting non-essential travel through the region, a significant international transit hub, and considering alternative routes when necessary.
Businesses are also maintaining open lines of communication with clients, keeping them informed about preparedness measures to ensure service continuity.
Furthermore, the advisory cautioned that geopolitical instability often leads to an increase in coordinated cyber threats, disinformation campaigns, and infrastructure targeting, prompting companies to enhance their cybersecurity defenses.
Key cybersecurity measures suggested include organization-wide credential resets, expedited patching of critical vulnerabilities, and the implementation of multi-factor authentication (MFA) for external access points like VPNs and cloud administration platforms.
Nasscom also urged firms to conduct security audits of their supply chains, especially for vendors with ties to the Middle East, as a compromised third-party supplier could lead to broader sector disruptions.
Other recommended actions include preparing for potential distributed denial-of-service (DDoS) attacks, maintaining offline and immutable backups for essential systems, and conducting employee training to combat social engineering and disinformation linked to the ongoing tensions.
Nasscom is actively monitoring the situation in the region and is in contact with the Middle East Council to evaluate developments and provide necessary support.