Cross-sectional audit of secondary occupations with a focus on conflicts of interest
Additional transfer of knowledge takes often place through the secondary occupations of professors and other scientific employees. The Swiss Federal Audit Office (SFAO) examined whether the sufficient measures had been taken to prevent financial or reputational damage. In addition, the SFAO assessed whether the applicable rules allow for sufficient knowledge transfer. The Swiss Federal Institute of Technology Zurich (ETH Zurich) and the Swiss Federal Institute of Technology Lausanne (EPFL) together employ almost 900 professors, about one third of whom have declared at least one secondary occupation. Secondary employment is much less common among other staff. Around 150 ongoing secondary occupations were recorded for the approximately 4,200 research institute employees.
Full description

Cyber security resilience of the Danish public sector II
Danish NAO underlines that public authorities depend on IT to deliver their services. Thus, major IT problems and loss of data relating to critical IT systems can have far-reaching consequences for the government, citizens and companies. The audit focused on IT contingency plans, secure continuity of operations and mitigation of the consequences of system breakdowns or data losses in the event of major IT breakdowns. Approximately 90 of the government's IT systems are assessed to be critical by the departments.
Full description

Security of servers managed by the Danish Agency for Governmental IT Services
Servers are essential part of IT infrastructure. At the same time, they are vulnerable to cyberattacks, because they can be exploited by hackers to gain unauthorized access to the system and steal sensitive information, corrupt data, or cause systems to malfunction. Once the security of a server is compromised, attackers can gain access to other computers and servers across the network. Danish auditors paid attention to risky stages of servers lifecycle. The Danish Agency for Governmental IT Services managed 5,353 servers on behalf of 46 authorities in time of the audit. 537 of these servers were no longer supported by their developers because they have reached the end of their lifecycle.
Full description