third Cyber Security Assessment Netherlands - NCSC

not only smart phones, tablets or computers, but all forms of
devices imaginable, from fridges to cars. That means the existing
vulnerabilities can be abused in a variety of ways.
The end-user holds a great responsibility for security, but is
confronted increasingly often with vulnerabilities in devices over
which they have little influence. In addition, the security of
computers and other devices requires knowledge that many
end-users do not have. Consumerisation also means that private
and business usage becomes intermingled, while that is not always
compatible. Business information is taken away from the area of
influence of the organisation and is susceptible to leaks in private
surroundings, at the same time private information is becoming
accessible to organisations.
Cloud computing has many advantages, but there are risks as well,
including the fact that access is not always well protected and the
cloud reduces the autonomy of organisations relating to the
quantity of requests from foreign governments. Cloud computing
also presents challenges for the detection and prosecution of crime.
Many organisations do not yet have basic measures in order, such as
patching and updating systems or the password policy. This is why
old vulnerabilities and methods of attack are still effective. Finally,
one important vulnerability is that many organisations do not have
the necessary knowledge, detection methods and ability to handle
incidents satisfactorily. «
36