Comment

Comment by rickdeckard

I don't know why it should be the governments job to secure private properties of corporations against vandalism/arson. It sounds much more absurd to me.

Starlink providing services to a customer (which made them a target in this case) is not a matter the local government of that site needs to protect them against.

--> Is it a local governments' job to secure the local properties of e.g. Lockheed, or the job of Lockheed as a for-profit supplier to the military?

--

Edit, as I expected this to be much more widely known: If you are operating in the business of critical infrastructure (for which Starlink qualifies, explicitly "digital infrastructure"), you have obligations to protect your facilities against physical and cyber attacks and have resilience and business continuity processes in place.

If you decide to operate in a business segment for critical infrastructure, it is not the governments job to secure your business, YOU have to comply to the requirements of operating in this field, and the government can audit and shut down your business if you're not in compliance.

In the EU, where this incident took place, this is well-defined under the CER-directive, and further extended for IT under NIS2 and CRE.

In the US, it's covered by CISA and CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act)

parent rickdeckard 17 days ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton