How well armed is ETH Zurich against cyber attacks? The TEUTOBURGIUM security review reveals strengths, but also critical gaps. Find out what insights were gained and how they are shaping the information security strategy.<\/p>\n\n\n\n\n\n\n\n
The IT landscape at ETH Zurich is very heterogeneous, and responsibilities are distributed in a decentralised manner. In view of increasing cyber threats, the TEUTOBURGIUM security review aimed to assess the capabilities of all ETH stakeholders in dealing with cyber attacks and to derive measures for improvement.<\/p>\n\n\n\n
The review was intended to provide an ETH-wide overall picture of technical, procedural and organisational weaknesses. The results serve as the basis for a sub-strategy «Dealing with cyber attacks» within the information security strategy. In addition to the analysis, the intention was to enable concrete proposals for measures to be derived.<\/p>\n\n\n\n
Participation was voluntary. The participating organisational units (seven departments, parts of the central IT Services and one department of the central bodies) were invited to actively help shape the scope of the test modules that related to them:<\/p>\n\n\n\n
The results from TEUTOBURGIUM were presented to the Risk Management Committee in May 2025 and have been incorporated into the information security strategy. The results show<\/p>\n\n\n\n
Research universities, including ETH Zurich, are an attractive and rewarding target for attackers. Particularly noteworthy are (<\/strong>economic<\/strong><\/a>) <\/strong>espionage and proliferation<\/strong><\/a> as well as blackmail and sabotage<\/strong><\/a>[1]<\/sup><\/a>.<\/p>\n\n\n\n It is evident that ETH Zurich, with its very heterogeneous IT landscape, tends to be more difficult to defend than institutions with a tighter organisation. It also remains to be seen whether<\/p>\n\n\n\n The lack of framework conditions (security gaps) will be analysed and classified. Finally, due to the considerable knowledge gained and extraordinary interest, TEUTOBURGIUM is to be extended to the remaining organisational units where appropriate.<\/p>\n\n\n\n Cyber and Information Security division (CISEC) of IT Services<\/a> and the CISO of ETH Zurich<\/p>\n\n\n\n [1]<\/a> Assessment based on the Prophylax awareness programme of the Federal Intelligence Service and other sources \u00e0 Akademische Welt im Visier, Spionage und Proliferation im akademischen Bereich (Academic world in the spotlight, espionage and proliferation in the academic sphere)<\/a>, December 2022, Federal Intelligence Service FIS, accessed on 5 January 2024<\/p>\n\n\n\n <\/p>\n","protected":false},"excerpt":{"rendered":" Cyber resilience at a glance: what TEUTOBURGIUM means for ETH<\/p>\n","protected":false},"author":838,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[257891,25],"tags":[301899,301982,301981,301980,301979,301978,301977],"class_list":["post-3778","post","type-post","status-publish","format-standard","hentry","category-it-sec","category-news","tag-cisec","tag-ciso-of-eth-zurich","tag-cyber-and-information-security-division","tag-cyber-attacks","tag-it-landscape-at-eth-zurich","tag-security-review","tag-teutoburgium"],"_links":{"self":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/posts\/3778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/users\/838"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/comments?post=3778"}],"version-history":[{"count":5,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/posts\/3778\/revisions"}],"predecessor-version":[{"id":3783,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/posts\/3778\/revisions\/3783"}],"wp:attachment":[{"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/media?parent=3778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/categories?post=3778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.ethz.ch\/its\/wp-json\/wp\/v2\/tags?post=3778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
Key findings from TEUTOBURGIUM<\/h2>\n\n\n\n
\n
Conclusion and outlook<\/h2>\n\n\n\n
Contact<\/h2>\n\n\n\n
\n\n\n\n