000 02933nam a22003377c 4500
001 00006684
003 ES-MaONT
005 20220906140417.0
008 210901s2021 xxua||ps ||||i00| 0 eng d
020 _a978-92-9204-511-1
024 _2DOI
_a10.2824/277632
040 _aES-MaONT
100 1 _95155
_aGogou, Vassiliki
245 1 0 _aTrust Services Security Incidents 2020
_b: Annual report : July 2021
_c/ Vassiliki Gogou, Marnix Dekker and Eleni Vytogianni, European Union Agency for Cybersecurity
260 _a[S.l.]
_b: ENISA,
_c16 July 2021
300 _a19 p.
_b: gráf.
_c; 1 documento PDF
336 _atexto (visual)
_2isbdcontent
337 _aelectrónico
_2isbdmedia
338 _arecurso en línea
_2rdacarrier
520 _aThis report provides an aggregated overview of the notified breaches for 2020, analysing root causes, statistics and trends. Marks the fifth round of security incident reporting for the EU’s trust services sector. In this round of annual summary reporting a total of 27 EU countries and 2 EFTA countries took part. They reported a total of 39 incidents. This report concludes that: 1) A steady increase in notified incidents: in 2020 notified incidents increased by around 18%, suggests that authorities and TSPs are becoming more familiar with the breach reporting process and their obligations under eIDAS. 2) The number of incidents with a large impact has dropped: in 2020 only 3 incidents were characterized as having had a “large impact” as opposed to 2019 when 10 such incidents had been reported 3) Τhe ratio of reported incidents concerning qualified and non-qualified trust services remains high: in 2020, 69% of total incidents had an impact on qualified trust services compared to approximately 33% of incidents reported on non-qualified trust services 4) The impact on subservices is mainly divided between certificate management (47% of the incidents) and certificate generation (42% of the incidents). 5) Approximately 66% (26 incidents) of the reported incidents were rated as minor compared to 2019 when 60% (19 incidents) were rated as having had only a minor impact. Only one incident had a very large (disastrous) impact, and only three incidents had a large impact. Furthermore, a significant increase in minor incidents has been observed, indicating that the incident reporting mechanism has become more familiar to the providers and they are reporting more incidents regardless of their severity.
650 0 _aCiberseguridad y confianza
_92188
653 _adata security
653 _aensuring security
653 _aonline privacy
653 _atrust
700 1 _aVytogianni, Eleni
_93130
700 1 _aDekker , Marnix
_93131
710 _aEuropean Union Agency for Cybersecurity
_93781
856 4 _uhttps://www.enisa.europa.eu/publications/trust-services-security-incident-2020-annual-report
_x0
_yAcceso al documento
942 _cINF
_2z
999 _c6684
_d6684