Atlantic Council report: Policymakers urged to secure cloud infrastructure for critical sectors

Policymakers must do more to confront the increasing vulnerability critical infrastructure sectors face due to their growing reliance on cloud computing, a new Atlantic Council report urges. The report highlights how the cloud enabled malicious actors to spy on government agencies, citing the 2020 Sunburst hack as an example.
Computer, Electronics, Pc, Laptop, Device, Grass, Lawn, Lawn Mower, Plant, Tool

With the increasing reliance on cloud computing in critical infrastructure sectors, policymakers face the pressing need to address the growing vulnerabilities in these sectors, as outlined in a report by The Digital Forensic Research Lab (DFRLab) at the Atlantic Council.

The report delves into the risks associated with cloud compromises and outages, underscoring the importance of addressing systemic risks linked to the adoption of cloud technology. Additionally, it emphasises the necessity of revising policies to recognise the crucial role played by cloud computing in maintaining the integrity of critical systems.

Examining cloud adoption in key sectors like healthcare, transportation, energy, defense, and financial services, the research sheds light on the detrimental consequences of the 2020 Sunburst hack. This incident involved malicious actors exploiting cloud products, specifically targeting Microsoft Azure’s Identity and Access Management services.

To mitigate such risks, the report proposes a range of reforms, including the establishment of a dedicated cloud management office and the creation of a task force dedicated to protecting cloud infrastructure. These measures are crucial steps toward safeguarding critical infrastructure sectors reliant on cloud computing.