By Lorenzo Bacciardi – CEO, Tommaso Mancini – Head of International Commercial Law, and Federico Alessandri – Of Counsel Tech & Law
A recent cyberattack remotely compromised the operation of refrigerators and freezers in hundreds of French supermarkets, causing temperatures to rise to 50 °C and resulting in substantial financial losses.
The incident highlights the cybersecurity risks associated with network-connected machinery and devices, as well as the importance of implementing a structured IT Governance and Cybersecurity framework.
These issues are particularly relevant for companies that integrate software and control systems developed by third-party suppliers into their products, with significant implications for cybersecurity, risk management and contractual liability.
To prevent and mitigate these risks, we recommend focusing on two operational priorities:
-
Assess the cybersecurity of products and integrated software.
-
Establish appropriate IT Governance measures to manage risks and responsibilities.
Let us examine how companies can address both priorities.
Download the guide in italian
1. Product and Software Security: What Should Companies Assess Immediately?
✔️ Software and Control Systems
Does the company have a complete overview of all software integrated into its products, including components developed by third-party suppliers?
✔️ Vulnerabilities and Updates
Are procedures in place to identify cybersecurity vulnerabilities and ensure that systems are updated promptly?
✔️ Remote Access and Connections
Are remote control systems adequately protected against unauthorized access and manipulation?
✔️ Contracts with Technology Suppliers
Do supplier contracts adequately address security obligations, software updates and liability in the event of cybersecurity incidents?
2. IT Governance: What Measures Should Companies Implement?
Cybersecurity risk mapping and assessment:
✔️ Definition of internal roles, responsibilities and procedures;
✔️ Policies for managing technology suppliers and software updates;
✔️ Procedures for preventing, managing and responding to cybersecurity incidents;
✔️ Assessment of regulatory compliance, including with the Cyber Resilience Act and the NIS2 Directive, where applicable.
The Guide
We have prepared a concise practical guide examining cybersecurity risks, regulatory obligations, and the IT Governance and Cybersecurity measures that companies can implement to protect their products.
Download the guide in italian
To assess your company’s position, contact us: segreteria@bacciardipartners.it