PCPD - Cyberport Investigation Report

https://www.pcpd.org.hk/english/news_events/media_statements/press_20240402.html

Investigation Report: https://www.pcpd.org.hk/english/enforcement/commissioners_findings/files/r24_12170_e.pdf - Deficiencies include:

1. Lack of effective detection measures in Cyberport’s information systems;

2. Failure to enable MFA for remote access ;

3. Insufficient security audits of the information systems;

4. Lack of concrete cybersecurity framework; and

5. Unnecessary retention of personal data