Kaspersky Lab software now blacklisted by KNF
On 10th June 2022, the Polish Financial Supervision Authority (KNF) issued a communication on the recommendation of the Government Plenipotentiary for Cyber Security of 30 May 2022 not to use information systems software produced by Kaspersky Lab, based in Moscow (Russian Federation).
What specific programs were found to be harmful?
In recommendation of the KNF and government, these programs were considered harmful: Kaspersky Internet Security, Kaspersky Anti-Virus, Kaspersky TOTAL Security and Kaspersky Safe Kids, due to the negative impact of such software on public security.
What is the danger of Kaspersky Lab software?
In the communication of the Government Plenipotentiary for Cyber Security Janusz Cieszyński, it is indicated that the Computer Security Incident Response Team (CSIRT) conducted a behavioral method study of software from the manufacturer Kaspersky Lab. As a result of the study, it was identified that the use of one of the products, antivirus software provided by Kaspersky Lab, poses a significant risk to information security. The significant risk of loss of information security attributes in the information systems used by the entities of the national cyber security system means a negative impact of this software on public security.
Who are the addressees of KNF communication?
The KNF message is addressed to all supervised entities, including in particular: banks, domestic payment institutions, small payment institutions, electronic money institutions, insurance companies, pension companies, investment companies, SKOKs, investment fund companies.
What are the expectations of KNF?
KNF expectations are the same as those contained in the recommendation of the Government Plenipotentiary for Cyber Security, namely that the KNF is convinced that that it is right to completely and utterly refrain from using the aforementioned software, which clearly threatens information security and public safety.
Although the KNF’s guidelines and positions are not binding and do not constitute an official interpretation of the law, they will certainly be respected by all Polish authorities and should be applied by market participants.
DKP Legal
