A few weeks ago, travellers at several of Europe\u00b4s largest airports had their check-in done by hand. The airports hadn\u00b4t been attacked directly. The shared system that many airlines use for check-in, boarding and baggage had been hit by ransomware at its supplier. At one airport it took more than two weeks before the central system was back.<\/p>\n
It is the same pattern again. A shared platform, used by many organisations, becomes a single point of failure for all of them at once.<\/p>\n
What can you do technically when you depend on a shared platform like that? Know which of your critical processes depend on it, and exactly how. Have a manual fallback that is documented and practised, not something you improvise on a Saturday morning with a queue of angry passengers. Some airlines were able to switch to their own backup systems and keep operating. That is worth a lot.<\/p>\n
Separate your connection to the platform from your own network, so a compromise on the supplier side doesn\u00b4t spread to you. Monitor the connection. Agree with the supplier on how you will be informed and how the system will be restored, and in which order.<\/p>\n
And after the incident, check what data the supplier held about you and your customers. In this case, passenger data was also affected.<\/p>\n
Shared infrastructure gives efficiency. It also gives shared failure. Plan for both.<\/p>\n","protected":false},"excerpt":{"rendered":"
A few weeks ago, travellers at several of Europe\u00b4s largest airports had their check-in done by hand. The airports hadn\u00b4t been attacked directly. The shared system that many airlines use for check-in, boarding and baggage had been hit by ransomware at its supplier. At one airport it took more than two weeks before the central […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4,13],"tags":[187,147,137],"class_list":["post-1488","post","type-post","status-publish","format-standard","hentry","category-security-architecture","category-technology","tag-aviation","tag-resilience","tag-supply-chain"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1488","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1488"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1488\/revisions"}],"predecessor-version":[{"id":1501,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1488\/revisions\/1501"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1488"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1488"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1488"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}