News Archive | Pragmatica AG Ihre Boutique Managementberatung seit über 25 Jahren. Tue, 05 May 2026 22:45:20 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 Switzerland in the crosshairs of foreign intelligence services https://www.pragmatica.ch/en/switzerland-in-the-crosshairs-of-foreign-intelligence-services/ Tue, 21 Oct 2025 21:42:52 +0000 https://www.pragmatica.ch/switzerland-in-the-crosshairs-of-foreign-intelligence-services/ The 2025 Situation Report of the Federal Intelligence Service (FIS) speaks a clear language: the threat of espionage activities in Switzerland has reached a new level. Switzerland has remained an attractive operational area for foreign intelligence services for decades. However, according to the latest report, the extent of these activities is not only still high - it is increasing significantly. The FIS explicitly confirms that the activities of the prohibited intelligence service have reached a new level. Companies with a high level of innovation, international networking or central importance for critical infrastructures are particularly affected.

Der Beitrag Switzerland in the crosshairs of foreign intelligence services erschien zuerst auf Pragmatica AG.

]]>

Switzerland in the crosshairs of foreign intelligence services

  • Information SECURITY

Companies must act now.

The 2025 situation report of the Federal Intelligence Service (FIS) speaks for itself: the threat of espionage activities in Switzerland has reached a new level. Switzerland has remained an attractive area of operation for foreign intelligence services for decades. But according to the latest report, it is not only the Extent of these activities remains high – it is increasing significantly. The FIS explicitly confirms that the activities of the prohibited intelligence service have reached a new level. Companies with a high level of innovation, international networking or central importance for critical infrastructures are particularly affected.

The 2025 Situation Report of the Federal Intelligence Service (FIS) speaks a clear language: the threat of espionage activities in Switzerland has reached a new level. Switzerland has remained an attractive operational area for foreign intelligence services for decades. However, according to the latest report, the extent of these activities is not only still high - it is increasing significantly. The FIS explicitly confirms that the activities of the prohibited intelligence service have reached a new level. Companies with a high level of innovation, international networking or central importance for critical infrastructures are particularly affected.

Source: FIS, “Security Switzerland 2025”: Global confrontation has a direct impact on Switzerland

At the same time, the FIS warns of an increasingly hybrid threat situation in which state-controlled actors could specifically target critical infrastructures. Although no direct state cyber sabotage has been observed in Switzerland to date, according to the report, power calculations and geopolitical objectives are clear drivers for potential attacks – including on Switzerland. Both Swiss interests and those of our European neighbors can be targeted if their infrastructure is operated or hosted in Switzerland.

What does this mean for Swiss companies in concrete terms?

Companies with digital business models, international supply chains or a role as a cloud hub for third countries are particularly exposed.t. The challenges surrounding cross-border data processing and access by third countries are central to this. We explain the specific risks and how they can be addressed in detail in the article “Third Country Intercept Risk in the Cloud”. However, the threat does not only affect technology or financial companies – but all organizations whose information, systems or people are a potential target. The defense against espionage does not begin at the national border, but at the border itself. at own physical, logical and personnel security system.

Pragmatica provides support in three critical areas:

Insider Threat and Risk Management

The new perimeter is called "Access".

Risksemanating from domestic offenders, are among the most underestimated risks. We help you to identify potential hazards from employees or related third parties in a structured and risk-oriented manner. parties, including Service provider outsourcing, and to address them effectively. This includes Measures for physical and logical access control, risk-based personnel security process, such as the identification of functions with increased integrity requirements as well as preventative awareness formats for all relevant Organization, processes and measures in the area of personnel safety.

Third Party Security Risk Management

The chain is only as strong as its weakest link.

Suppliers, external IT service providers and strategic partners can be gateways and multipliers for intelligence activities related to illicit intelligence gathering by private, para-state and state actors.

With our support, you will establish structured third-party risk governance, carry out security due diligence and implement interlocking control mechanisms that are both regulatory compliant and operationally effective.

supply chain governance titelbild

Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management

29. September 2025

Cyberattacks on supply chains are no longer an isolated incident. What began with the recent attack on the widely used baggage management software Muse from Collins Aerospace – which affected airports in London, Berlin, Brussels and Dublin – is part of a threatening development: a series of targeted attacks on critical infrastructures and supply chains in Europe.

Read more ➞

Use case:
Third Country Intercept Risk in the cloud

Data travels across borders - and so do risks.

Suppliers, external IT service providers and strategic partners can be gateways and multipliers for intelligence activities related to illicit intelligence gathering by private, para-state and state actors.

With our support, you will establish structured third-party risk governance, carry out security due diligence and implement interlocking control mechanisms that are both regulatory compliant and operationally effective.

Executive Order 12333 – US Intelligence Community surveillance activities affecting cloud data security

Third Country Intercept: How secure is your data in the cloud?

29. January 2025

What ostensibly appears to be a well-orchestrated cyber-attack on U.S. software supplier Collins Aerospace’s ubiquitously deployed product “Muse” for managing traveler baggage beginning on the evening of 19 September 2025 is not an isolated incident. Not only did this most recent attack affect multiple airports, i.e. Heathrow, Berlin, Brussels and Dublin. This attack is – more importantly – one in a string of offensive actions targeting European infrastructure and supply chains. To name just a few recent examples:

Read more ➞

Why Pragmatica?

We combine in-depth experience in information and cyber security with regulatory know-how and methodological excellence. Our advice is implementation-oriented, targeted and tailored to your organizational framework. We draw on our broad experience from security-related transformation projects in the financial industry, healthcare and the public sector.

Conclusion: The new threat situation demands decisive action.

We help you to adapt a holistic and comprehensive security system (physical, logical and personnel) to your needs in a modular, proportional and targeted manner to meet current challenges.

Whether as part of an assessment, strategic security planning or operational support for specific projects – with Pragmatica you are on the safe side.

Do you have any questions?

We would be happy to accompany you and your company on the path to security!

Contact us for a confidential initial consultation and an initial assessment of your security situation.

Contact

Source reference

  • “Security Switzerland 2025”: Global confrontation has a direct impact on Switzerland. (n.d.). https://www.vbs.admin.ch/de/ndb-sicherheit-schweiz-2025

Further topics

,

Process Mining and AI: Webinar I & II

to the article ➞

Self-services in digital banking

to the article ➞

, ,

FINMA Risk Monitor 2025

to the article ➞

, ,

Generative AI

to the article ➞

, ,

From cost pressure to the efficiency revolution

to the article ➞

,

Do I really need AI?

to the article ➞

,

Switzerland in the crosshairs of foreign intelligence services

to the article ➞

, ,

Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management

to the article ➞

,

UBS Data Leak via Chain IQ: Third Party Risk & Supply Chain Security Lessons

to the article ➞

,

Third Country Intercept: How secure is your data in the cloud?

to the article ➞

Der Beitrag Switzerland in the crosshairs of foreign intelligence services erschien zuerst auf Pragmatica AG.

]]> Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management https://www.pragmatica.ch/en/resilience-in-our-supply-chains/ Mon, 29 Sep 2025 19:43:27 +0000 https://www.pragmatica.ch/resilience-in-our-supply-chains-how-the-shifting-threatscape-demands-comprehensive-security-risk-management/ Cyberattacks on supply chains are no longer an isolated incident. What began with the recent attack on the widely used baggage management software Muse from Collins Aerospace - which affected airports in London, Berlin, Brussels and Dublin - is part of a threatening development: a series of targeted attacks on critical infrastructures and supply chains in Europe.

Der Beitrag Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management erschien zuerst auf Pragmatica AG.

]]>

Resilience in the supply chain

  • Information SECURITY

How the shifting threatscape demands comprehensive security risk management

Cyberattacks on supply chains are long since not isolated case more. What with the recent attack on the widespread baggage management-software Muse from Collins Aerospace began – with Effects on Airports in London, Berlin, Brussels and Dublin – is Part of a threatening Development: A series of targeted Attacks on critical Infrastructures and Supply chains in Europe.

Just a few more examples from the last few months:

  • Jaguar Land Rover recently had to halt production – with repercussions that continue to this day.
  • A so-called prompt injection attack (“Echoleak”) on Copilotpart of the Microsoft ecosystem, was stopped at the last moment.
  • Marks & Spencer suffered an attack on its time-critical supply chain – with an expected loss of around a third of its annual profit.
  • The outsourcing service provider ChainIQ was compromised – with consequential damage for companies such as UBS, Pictet and Manor.

These incidents are only the tip tip of the iceberg.

Was alle diese Angriffe gemeinsam haben: Sie treffen Unternehmen über ihre Lieferketten. These are today often high networked, complex and on specialized Third parties outsourced – exactly the makes them to the ideal attack surface.

The risks increase in particular due to:

  • Concentration of services on a few providers
  • SaaS, cloud and procurement outsourcing without a coordinated security architecture
  • Access rights of third partiesthat exceed those of your own employees
  • Lack of control over new perimeters – Digital, physical and personnel access channels

Each of these weaknesses can in emergency to the Multiplier for attacker become – with enormous damage.

threatscape titelbild

New reality: threats are hybrid

Supply chains are today digital AND physically exposed – affected are not only Data, but also Logistics systems, Locations and People. Cybercriminals, Industrial espionage, state financed Actors – them all use multidimensional attack paths.

Particularly critical: Managed services and third parties with privileged system access. If such a service provider is compromised, this can have a domino effect with massive consequential damage – even for companies with a high security maturity of their own.

Resilience begins with risk awareness

Before talking about technologies, automation or tools, you need a strategic understanding for the new threat picture. The decisive factors are:

  • Security assessments of the entire supply chain
  • Coordinated third-party risk management
  • Coordinated security architectures for digital, physical and personal risks
  • Cultural resilience through awareness, leadership and governance

Selective IT security is not enough. Resilience is created through integrated, pragmatic security risk management – strategically, operationally and culturally.

Pragmatica supports you with a proven approach!

With our experience from over 500 projects, we offer a practical approach to comprehensive security risk management – with a focus on supply chains, outsourcing and third party management.

Our services

Enterprise Security Risk Management

Holistic regulatory framework based on best practice for managing all security disciplines.

Third Party Security Risk Management

Evaluation, classification and monitoring of external partners in the context of governance, contracts and audits.

Insider Threat & Risk Management

DLP introduction, awareness and benchmarks based on counter-intelligence know-how.

Data Transfer Impact Analysis (DTIA)

Assessment of outsourcing risks for data transfers abroad - with a focus on government access options.

Do you have any questions?
We would be happy to accompany you and your company on the path to security!

Contact

Source reference

Further topics

,

Process Mining and AI: Webinar I & II

to the article ➞

Self-services in digital banking

to the article ➞

, ,

FINMA Risk Monitor 2025

to the article ➞

, ,

Generative AI

to the article ➞

, ,

From cost pressure to the efficiency revolution

to the article ➞

,

Do I really need AI?

to the article ➞

,

Switzerland in the crosshairs of foreign intelligence services

to the article ➞

, ,

Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management

to the article ➞

,

UBS Data Leak via Chain IQ: Third Party Risk & Supply Chain Security Lessons

to the article ➞

,

Third Country Intercept: How secure is your data in the cloud?

to the article ➞

Der Beitrag Resilience in our supply chains: How the shifting threatscape demands comprehensive security risk management erschien zuerst auf Pragmatica AG.

]]>