Dr. Doron Zimmermann – Beiträge zu Cyber & Information Security | Pragmatica AG https://www.pragmatica.ch/en/author/doron/ Ihre Boutique Managementberatung seit über 25 Jahren. Tue, 05 May 2026 22:45:51 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 Switzerland in the crosshairs of foreign intelligence services https://www.pragmatica.ch/en/switzerland-in-the-crosshairs-of-foreign-intelligence-services/ Tue, 21 Oct 2025 21:42:52 +0000 https://www.pragmatica.ch/switzerland-in-the-crosshairs-of-foreign-intelligence-services/ The 2025 Situation Report of the Federal Intelligence Service (FIS) speaks a clear language: the threat of espionage activities in Switzerland has reached a new level. Switzerland has remained an attractive operational area for foreign intelligence services for decades. However, according to the latest report, the extent of these activities is not only still high - it is increasing significantly. The FIS explicitly confirms that the activities of the prohibited intelligence service have reached a new level. Companies with a high level of innovation, international networking or central importance for critical infrastructures are particularly affected.

Der Beitrag Switzerland in the crosshairs of foreign intelligence services erschien zuerst auf Pragmatica AG.

]]>

Switzerland in the crosshairs of foreign intelligence services

  • Information SECURITY

Companies must act now.

The 2025 situation report of the Federal Intelligence Service (FIS) speaks for itself: the threat of espionage activities in Switzerland has reached a new level. Switzerland has remained an attractive area of operation for foreign intelligence services for decades. But according to the latest report, it is not only the Extent of these activities remains high – it is increasing significantly. The FIS explicitly confirms that the activities of the prohibited intelligence service have reached a new level. Companies with a high level of innovation, international networking or central importance for critical infrastructures are particularly affected.

The 2025 Situation Report of the Federal Intelligence Service (FIS) speaks a clear language: the threat of espionage activities in Switzerland has reached a new level. Switzerland has remained an attractive operational area for foreign intelligence services for decades. However, according to the latest report, the extent of these activities is not only still high - it is increasing significantly. The FIS explicitly confirms that the activities of the prohibited intelligence service have reached a new level. Companies with a high level of innovation, international networking or central importance for critical infrastructures are particularly affected.

Source: FIS, “Security Switzerland 2025”: Global confrontation has a direct impact on Switzerland

At the same time, the FIS warns of an increasingly hybrid threat situation in which state-controlled actors could specifically target critical infrastructures. Although no direct state cyber sabotage has been observed in Switzerland to date, according to the report, power calculations and geopolitical objectives are clear drivers for potential attacks – including on Switzerland. Both Swiss interests and those of our European neighbors can be targeted if their infrastructure is operated or hosted in Switzerland.

What does this mean for Swiss companies in concrete terms?

Companies with digital business models, international supply chains or a role as a cloud hub for third countries are particularly exposed.t. The challenges surrounding cross-border data processing and access by third countries are central to this. We explain the specific risks and how they can be addressed in detail in the article “Third Country Intercept Risk in the Cloud”. However, the threat does not only affect technology or financial companies – but all organizations whose information, systems or people are a potential target. The defense against espionage does not begin at the national border, but at the border itself. at own physical, logical and personnel security system.

Pragmatica provides support in three critical areas:

Insider Threat and Risk Management

The new perimeter is called "Access".

Risksemanating from domestic offenders, are among the most underestimated risks. We help you to identify potential hazards from employees or related third parties in a structured and risk-oriented manner. parties, including Service provider outsourcing, and to address them effectively. This includes Measures for physical and logical access control, risk-based personnel security process, such as the identification of functions with increased integrity requirements as well as preventative awareness formats for all relevant Organization, processes and measures in the area of personnel safety.

Third Party Security Risk Management

The chain is only as strong as its weakest link.

Suppliers, external IT service providers and strategic partners can be gateways and multipliers for intelligence activities related to illicit intelligence gathering by private, para-state and state actors.

With our support, you will establish structured third-party risk governance, carry out security due diligence and implement interlocking control mechanisms that are both regulatory compliant and operationally effective.

supply chain governance titelbild

Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management

29. September 2025

Cyberattacks on supply chains are no longer an isolated incident. What began with the recent attack on the widely used baggage management software Muse from Collins Aerospace – which affected airports in London, Berlin, Brussels and Dublin – is part of a threatening development: a series of targeted attacks on critical infrastructures and supply chains in Europe.

Read more ➞

Use case:
Third Country Intercept Risk in the cloud

Data travels across borders - and so do risks.

Suppliers, external IT service providers and strategic partners can be gateways and multipliers for intelligence activities related to illicit intelligence gathering by private, para-state and state actors.

With our support, you will establish structured third-party risk governance, carry out security due diligence and implement interlocking control mechanisms that are both regulatory compliant and operationally effective.

Executive Order 12333 – US Intelligence Community surveillance activities affecting cloud data security

Third Country Intercept: How secure is your data in the cloud?

29. January 2025

What ostensibly appears to be a well-orchestrated cyber-attack on U.S. software supplier Collins Aerospace’s ubiquitously deployed product “Muse” for managing traveler baggage beginning on the evening of 19 September 2025 is not an isolated incident. Not only did this most recent attack affect multiple airports, i.e. Heathrow, Berlin, Brussels and Dublin. This attack is – more importantly – one in a string of offensive actions targeting European infrastructure and supply chains. To name just a few recent examples:

Read more ➞

Why Pragmatica?

We combine in-depth experience in information and cyber security with regulatory know-how and methodological excellence. Our advice is implementation-oriented, targeted and tailored to your organizational framework. We draw on our broad experience from security-related transformation projects in the financial industry, healthcare and the public sector.

Conclusion: The new threat situation demands decisive action.

We help you to adapt a holistic and comprehensive security system (physical, logical and personnel) to your needs in a modular, proportional and targeted manner to meet current challenges.

Whether as part of an assessment, strategic security planning or operational support for specific projects – with Pragmatica you are on the safe side.

Do you have any questions?

We would be happy to accompany you and your company on the path to security!

Contact us for a confidential initial consultation and an initial assessment of your security situation.

Contact

Source reference

  • “Security Switzerland 2025”: Global confrontation has a direct impact on Switzerland. (n.d.). https://www.vbs.admin.ch/de/ndb-sicherheit-schweiz-2025

Further topics

,

Process Mining and AI: Webinar I & II

to the article ➞

Self-services in digital banking

to the article ➞

, ,

FINMA Risk Monitor 2025

to the article ➞

, ,

Generative AI

to the article ➞

, ,

From cost pressure to the efficiency revolution

to the article ➞

,

Do I really need AI?

to the article ➞

,

Switzerland in the crosshairs of foreign intelligence services

to the article ➞

, ,

Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management

to the article ➞

,

UBS Data Leak via Chain IQ: Third Party Risk & Supply Chain Security Lessons

to the article ➞

,

Third Country Intercept: How secure is your data in the cloud?

to the article ➞

Der Beitrag Switzerland in the crosshairs of foreign intelligence services erschien zuerst auf Pragmatica AG.

]]> Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management https://www.pragmatica.ch/en/resilience-in-our-supply-chains/ Mon, 29 Sep 2025 19:43:27 +0000 https://www.pragmatica.ch/resilience-in-our-supply-chains-how-the-shifting-threatscape-demands-comprehensive-security-risk-management/ Cyberattacks on supply chains are no longer an isolated incident. What began with the recent attack on the widely used baggage management software Muse from Collins Aerospace - which affected airports in London, Berlin, Brussels and Dublin - is part of a threatening development: a series of targeted attacks on critical infrastructures and supply chains in Europe.

Der Beitrag Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management erschien zuerst auf Pragmatica AG.

]]>

Resilience in the supply chain

  • Information SECURITY

How the shifting threatscape demands comprehensive security risk management

Cyberattacks on supply chains are long since not isolated case more. What with the recent attack on the widespread baggage management-software Muse from Collins Aerospace began – with Effects on Airports in London, Berlin, Brussels and Dublin – is Part of a threatening Development: A series of targeted Attacks on critical Infrastructures and Supply chains in Europe.

Just a few more examples from the last few months:

  • Jaguar Land Rover recently had to halt production – with repercussions that continue to this day.
  • A so-called prompt injection attack (“Echoleak”) on Copilotpart of the Microsoft ecosystem, was stopped at the last moment.
  • Marks & Spencer suffered an attack on its time-critical supply chain – with an expected loss of around a third of its annual profit.
  • The outsourcing service provider ChainIQ was compromised – with consequential damage for companies such as UBS, Pictet and Manor.

These incidents are only the tip tip of the iceberg.

Was alle diese Angriffe gemeinsam haben: Sie treffen Unternehmen über ihre Lieferketten. These are today often high networked, complex and on specialized Third parties outsourced – exactly the makes them to the ideal attack surface.

The risks increase in particular due to:

  • Concentration of services on a few providers
  • SaaS, cloud and procurement outsourcing without a coordinated security architecture
  • Access rights of third partiesthat exceed those of your own employees
  • Lack of control over new perimeters – Digital, physical and personnel access channels

Each of these weaknesses can in emergency to the Multiplier for attacker become – with enormous damage.

threatscape titelbild

New reality: threats are hybrid

Supply chains are today digital AND physically exposed – affected are not only Data, but also Logistics systems, Locations and People. Cybercriminals, Industrial espionage, state financed Actors – them all use multidimensional attack paths.

Particularly critical: Managed services and third parties with privileged system access. If such a service provider is compromised, this can have a domino effect with massive consequential damage – even for companies with a high security maturity of their own.

Resilience begins with risk awareness

Before talking about technologies, automation or tools, you need a strategic understanding for the new threat picture. The decisive factors are:

  • Security assessments of the entire supply chain
  • Coordinated third-party risk management
  • Coordinated security architectures for digital, physical and personal risks
  • Cultural resilience through awareness, leadership and governance

Selective IT security is not enough. Resilience is created through integrated, pragmatic security risk management – strategically, operationally and culturally.

Pragmatica supports you with a proven approach!

With our experience from over 500 projects, we offer a practical approach to comprehensive security risk management – with a focus on supply chains, outsourcing and third party management.

Our services

Enterprise Security Risk Management

Holistic regulatory framework based on best practice for managing all security disciplines.

Third Party Security Risk Management

Evaluation, classification and monitoring of external partners in the context of governance, contracts and audits.

Insider Threat & Risk Management

DLP introduction, awareness and benchmarks based on counter-intelligence know-how.

Data Transfer Impact Analysis (DTIA)

Assessment of outsourcing risks for data transfers abroad - with a focus on government access options.

Do you have any questions?
We would be happy to accompany you and your company on the path to security!

Contact

Source reference

Further topics

,

Process Mining and AI: Webinar I & II

to the article ➞

Self-services in digital banking

to the article ➞

, ,

FINMA Risk Monitor 2025

to the article ➞

, ,

Generative AI

to the article ➞

, ,

From cost pressure to the efficiency revolution

to the article ➞

,

Do I really need AI?

to the article ➞

,

Switzerland in the crosshairs of foreign intelligence services

to the article ➞

, ,

Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management

to the article ➞

,

UBS Data Leak via Chain IQ: Third Party Risk & Supply Chain Security Lessons

to the article ➞

,

Third Country Intercept: How secure is your data in the cloud?

to the article ➞

Der Beitrag Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management erschien zuerst auf Pragmatica AG.

]]> UBS Data Leak via Chain IQ: Third Party Risk & Supply Chain Security Lessons https://www.pragmatica.ch/en/ubs-data-leak-via-chain-iq-third-party-risk-supply-chain-security-lessons/ Mon, 30 Jun 2025 17:49:45 +0000 https://www.pragmatica.ch/ubs-data-leak-via-chain-iq-third-party-risk-supply-chain-security-lessons/ Find out what the cyber attack on UBS and Chain IQ reveals about supply chain risks, third party security vulnerabilities and compliance in financial outsourcing. Strengthen your TPSRM strategy now.

Der Beitrag UBS Data Leak via Chain IQ: Third Party Risk & Supply Chain Security Lessons erschien zuerst auf Pragmatica AG.

]]>

UBS Data Leak via Chain IQ: Third Party Risk & Supply Chain Security Lessons

  • Information SECURITY

Data leak at UBS service provider Chain IQ reveals serious weaknesses in supply chain security

Last week, it became known that the major Swiss bank UBS was the indirect victim of a cyberattack – the strategic service provider Chain IQ, an international provider of procurement management, was affected. According to media reports, the attack compromised the personal data of over 130,000 UBS employees as well as confidential accounting data from Pictet Bank (Le Temps,SRF, Handelszeitung).

The fact that a company specializing in outsourcing itself becomes a target underlines an unpleasant truth: supply chains have long since become a systemically relevant target – especially in highly regulated sectors such as financial services.

Supply Chain Attacks: From SolarWinds to Chain IQ

Such incidents are reminiscent of the infamous SolarWinds attack, which used an infected software component to gain access to tens of thousands of organizations worldwide, including U.S. government agencies and technology companies like Microsoft and Cisco (NPR, NCSC UK, PSU Library). The pattern is clear: cybercriminals use systemically relevant service providers to gain access to a much larger ecosystem.

Chain IQ acts as such a hub. The fact that hackers specifically target such service providers is strategically motivated: The multiplier effect of a successful attack is considerable.

Associated risks: International data flows and access by third countries

In our last article, we already referred to critical risks in the context of Third Country Intercept context: Even legally permissible data flows can lead to massive security incidents when combined with weak protective measures.

Current events clearly show that technical and contractual protective measures alone are not enough. A holistic security strategy across all third-party relationships is required.

Supply Chain Security

Pragmatica TPSRM: Protection that goes beyond company boundaries

Pragmatica AG has been helping organizations protect their information assets for over 25 years – both internally and externally. With our Third Party Security Risk Management (TPSRM) service, we specifically address the challenges of growing dependencies in the context of outsourcing, cloud and partner ecosystems.

Our range of services in the area of information security and cyber security specifically addresses the challenges of sourcing, partnerships and outsourced services. Together with our clients, we develop security strategies that have an impact beyond their own company – regulatory sound, technically coordinated and operationally feasible.

In conjunction with our Risk, Compliance & Privacy Service we create integrated solutions that holistically cover technological, legal and organizational aspects.

Our service includes:

    • Systematic discovery and GAP analyses
    • Comparison with reference models (e.g. ISO/IEC 27036, NIST)
    • Prioritized roadmap with concrete measures
    • Implementation support and stakeholder management
    • Interlocking with cloud security, data governance, BCM & incident response

Our approach ismodular, tried-and-tested and scalable across all sectors – we combine technical excellence with regulatory understanding and a clear focus on implementation.

Conclusion: the security strategy does not end at the company's borders

Chain IQ is a prominent example – but by no means an isolated case. The supply chain is one of the most dangerous areas of attack today. Companies must understand and actively manage third-party risks as an integral part of their security architecture.

Let’s strengthen your resilience together with a TPSRM approach that works.

Do you have any questions?
We would be happy to accompany you and your company on the path to security!

Contact

Further topics

,

Process Mining and AI: Webinar I & II

to the article ➞

Self-services in digital banking

to the article ➞

, ,

FINMA Risk Monitor 2025

to the article ➞

, ,

Generative AI

to the article ➞

, ,

From cost pressure to the efficiency revolution

to the article ➞

,

Do I really need AI?

to the article ➞

,

Switzerland in the crosshairs of foreign intelligence services

to the article ➞

, ,

Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management

to the article ➞

,

UBS Data Leak via Chain IQ: Third Party Risk & Supply Chain Security Lessons

to the article ➞

,

Third Country Intercept: How secure is your data in the cloud?

to the article ➞

References and further information

On the cyber attack on Chain IQ / UBS:

To the SolarWinds hack:

Der Beitrag UBS Data Leak via Chain IQ: Third Party Risk & Supply Chain Security Lessons erschien zuerst auf Pragmatica AG.

]]> Third Country Intercept: How secure is your data in the cloud? https://www.pragmatica.ch/en/third-country-intercept/ Wed, 29 Jan 2025 19:22:39 +0000 https://www.pragmatica.ch/third-country-interception-risk-in-the-cloud/ What ostensibly appears to be a well-orchestrated cyber-attack on U.S. software supplier Collins Aerospace’s ubiquitously deployed product “Muse” for managing traveler baggage beginning on the evening of 19 September 2025 is not an isolated incident. Not only did this most recent attack affect multiple airports, i.e. Heathrow, Berlin, Brussels and Dublin. This attack is – more importantly - one in a string of offensive actions targeting European infrastructure and supply chains. To name just a few recent examples:

Der Beitrag Third Country Intercept: How secure is your data in the cloud? erschien zuerst auf Pragmatica AG.

]]>

Third Country Intercept Risk in the Cloud

  • Information SECURITY

Security versus data leakage risk.
How secure is your data in the cloud?

Executive Order 12333 – US Intelligence Community surveillance activities affecting cloud data security

The issue of security and data protection in the cloud is becoming increasingly complex for companies. One crucial aspect that is often underestimated is the risk of data being leaked by third countries such as the USA – due to their national security laws. Organizations that rely on the services of large cloud providers (hyperscalers) are particularly affected.

Legal bases that you should know:

  • Executive Order 12333 (EO 12333): Mandate for US authorities such as the NSA and CIA to gather foreign intelligence. Decisions are made without judicial review.
  • FISA Sec. 702 Allows targeted monitoring of “non-US persons” and binds cloud providers to cooperate via “compelled assistance” – often secretly and without notifying customers.

Disclaimer: The legal bases mentioned (EO 12333 & FISA Sec. 702) are anchored in administrative or national security law and are therefore above civil law, on the basis of which most outsourcing contracts with hyperscalers are concluded by Swiss companies.
We do not offer legal advice, but security advice.

What does this mean for your company?

  • Schrems II and the reality of data protection requirements: Despite standard contractual clauses (SCCs) and additional security measures, gaps in data control remain.
  • Transparency deficits and geopolitical risks: The lack of transparency in surveillance requests and possible sanctions could have unexpected effects on data availability.

The opinion of the European Data Protection Board (EDPB) is that there are currently no legal, organizational or technical measures that can completely eliminate the risk of foreign intelligence gathering by third countries in the cloud.

Conclusion: safety positioning is crucial

Companies in Switzerland and Europe must develop a comprehensive security strategy in order to minimize the risks posed by third-country interference. This includes

  1. Selection of cloud providers that offer the highest encryption standards and ideally are not subject to “compelled assistance” under EO 12333, FISA obligations or similar obligations under administrative law.
  2. Use of technologies such as Client-Side Agents (CSA) and Highly Secure Models (HSM) to mitigate the risk.
  3. Strengthening the internal security system at a logical, technical, physical and personnel level in order to be prepared for possible incidents.

The risk of data leaks in the cloud is not just a data protection problem – it is a security risk with global implications.

Is your cloud data really secure?

With our extensive expertise in process design, we create tailored solutions that align regulatory requirements with best security practices. We rapidly identify the key compliance and security risks affecting your organization and integrate effective mitigation strategies into your contract and risk management frameworks. Our approach emphasizes stakeholder alignment and the optimization of critical interfaces to ensure seamless and secure third-party collaboration.

We are happy to support you with the following services:

  • Carrying out a comprehensive risk analysis of outsourcing contracts from the perspective of third-party security risk management
  • Security-based Data Transfer Impact Analysis (DTIA) for the assessment of data transfer risks
  • Review of additional organizational and technical security measures
  • Identification and designation of security risks when outsourcing to cloud providers in third countries
  • Creation of a prioritized risk mitigation plan (risk treatment plan)
  • Selection of cloud providers that offer the highest encryption standards and ideally are not subject to “compelled assistance” under EO 12333, FISA obligations or similar obligations under administrative law.

     

Do you have any questions?
We would be happy to accompany you and your company on the path to security!

Contact

Further topics

,

Process Mining and AI: Webinar I & II

to the article ➞

Self-services in digital banking

to the article ➞

, ,

FINMA Risk Monitor 2025

to the article ➞

, ,

Generative AI

to the article ➞

, ,

From cost pressure to the efficiency revolution

to the article ➞

,

Do I really need AI?

to the article ➞

,

Switzerland in the crosshairs of foreign intelligence services

to the article ➞

, ,

Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management

to the article ➞

,

UBS Data Leak via Chain IQ: Third Party Risk & Supply Chain Security Lessons

to the article ➞

,

Third Country Intercept: How secure is your data in the cloud?

to the article ➞

Der Beitrag Third Country Intercept: How secure is your data in the cloud? erschien zuerst auf Pragmatica AG.

]]>