O risco de ataques do tipo insider na cadeia de fornecedores do sistema financeiro nacional

Abstract

With the BC+ and BC# agendas, the Central Bank of Brazil (BCB) promoted the expansion of the SFN (National Financial System – NFS). Banking fintechs and Payment Institutions emerged with different business models. However, these companies require speed in the development of their business—otherwise, they may lose their niche to another competitor—and they generally have limited initial capital. As a result, they focus on their core business and outsource other necessary components for operations, which increases the risk of cyberattacks. Insider attacks —which are cyberattacks executed or facilitated by individuals within an organization, whether employees or third-party providers with legitimate access—can become more frequent due to this reliance on outsourcing. Supply chain control, as well as the management of employees and third parties, is just as important as protecting against external attacks. Two recent attacks on the SFN, in which the supply chain and insider threats were the main vectors, are presented. Finally, the BCB has announced measures to mitigate insider and supply chain risks, which are presented at the end of this study.