In the context of war, cyberspace has become a full-fledged battlefield. Massive attacks on government systems, telecom operators, transport services, and critical infrastructure facilities prove that today, the target is not only information but also the ability of both the state and businesses to function.
Cloud platforms, data centers, and infrastructure providers are under constant pressure and must adapt to new types of threats that significantly exceed traditional scenarios. Specifically, increasingly frequent attacks are not aimed solely at stealing or encrypting data, but at its complete destruction.
Volodymyr Pokatylov, Director of Data Center “PARKOVYI” Data Center, has highlighted five technical solutions that have been implemented at the ITU Member “PARKOVYI” Data Center — and which have already become a new security standard for the company’s clients. These steps may be useful to anyone looking to enhance the cybersecurity of their infrastructure.
Today, VPNs and firewalls no longer guarantee adequate protection. It’s important to reassess security architecture and segment the network so that even internal access via VPN is handled as external – with full control and limitations. Each segment must have its own level of isolation and monitoring.
Implementing multi-factor authentication (MFA) as a mandatory requirement for all clients and partners – regardless of size or status. This also applies to internal operations – each account must undergo verification, auditing, and have restricted access.
Privileged Access Management (PAM) allows for avoiding human errors and truly controlling accounts with elevated privileges. Administrators will only have the rights necessary to perform specific tasks, and systems will automatically change passwords and keys several times a day, while monitoring users with elevated access. This will cover both IT systems and network equipment.
Network protection can no longer be limited to just L2-level. To protect web applications and critical services, it is crucial to implement a Web Application Firewall. Its presence allows effective defense against attacks targeting specific applications, APIs, or control panels.
The destruction of data often begins with an attack on backup copies. Recently, the company launched the Retention Lock Backup service — a solution that protects backup copies from complete destruction within a defined period.
Based on Dell EMC DataDomain solutions and the ability to integrate with Veeam Backup & Replication 12.1, the service enables:
This tool has become part of the company’s strategic response to new types of attacks and enables clients to maintain control even in the event of serious system compromise.
The European Union Agency for Cybersecurity (ENISA) highlights the central role of data centers in the structure of critical digital infrastructure. The updated NIS2 Directive imposes new requirements on operators – not only at the technical level but also at the organizational level. The goal is to make the EU’s digital infrastructure more resilient to attacks and reduce risks to the economy and society.
Ukrainian data centers have already gone through this process since the start of the full-scale invasion. Ukrainian businesses and critical infrastructure now have access to protected and secure infrastructure and cloud solutions in data centers that withstand constant air alerts, power outages, physical risks, and continuous cyberattacks.
That is why the Data Center “PARKOVYI” shares these approaches, as the strength of the ecosystem is not determined by isolated efforts, but by the ability to mutually support, ensure transparency, and share responsibility.