RESEARCH: Government Agencies Unable to Assess Their Cyber Attack Risks www.gogo.mn
In 2021, an assessment based on the MNS ISO/IEC 27001 standard was conducted for 605 local government organizations in Mongolia.
The findings revealed that only 35% of these organizations have an information security policy, while the remaining organizations were deemed inadequate in this area.
Regarding asset management, 53% of the organizations addressed the issue effectively, but 47% were identified as needing improvements. Additionally, 43% of the organizations were found to be managing human resource issues appropriately, though further progress is necessary in this area.
A cybersecurity study involving 67 government organizations in Mongolia was also conducted. The results showed that:
32.35% of these organizations have dedicated IT units.
29.41% have experienced some form of cyber attack.
50.33% do not follow any standards or frameworks for ensuring information security.
30% have never conducted a risk assessment.
One of the most concerning statistics is that 70.59% of these organizations are unaware of their risk of being targeted by cyber attacks, and 56.67% have not developed information security policies or documentation.
This research highlights the attitudes and preparedness of government organizations regarding information security.
The study included five institutions under the State Great Khural, 28 government agencies, 14 central and local government bodies, and five other organizations.
To further assess the current state of cybersecurity in Mongolia, the Ministry of Digital Development, Innovation, and Communications is collaborating with the University of Oxford. The results of this study are expected to be published by the end of 2024.
Published Date:2024-11-20