Yesterday (the 1st of June 2022), Polish Prime Minister Mateusz Morawiecki, extended the BRAVO and CHARLIE-CRRP degrees until the end of June. Although the alerts have a preventive character and were introduced by the Government Head in relation to the war on Ukraine, this is the first time we meet a situation in which it was decided to introduce CHARLIE-CRP; the third of four alert degrees informing public administration bodies of a high threat of cyber attack.
Legal basis
Consequences of BRAVO and CHARLIE-CRP alerts
Although the announcement of the Ministry of Interior underlined that the implemented safety precautions are, above all, a warning sign for the public administration authorities as well as the heads of services and institutions competent in security and crisis management, there are certain consequences connected with their implementation. Pursuant to the regulations, on the initiative of the minister in charge of internal affairs or upon a motion of the Chief Commandant of the Police or the Head of the Internal Security Agency, in the area covered by the aforementioned alert levels it is allowed to:
- ban public gatherings or mass events;
- control public utilities;
- control vehicles and persons entering the premises of the aforementioned public utilities;
- check the operation of means of communication used for maintaining security of citizens.
BRAVO and CHARLIE-CRP alert degrees extended through the end of June 2022
Previously, until mid-February, the first level of cyberattack risk – ALFA-CRP – was introduced in Poland. Michał Czuryło, an expert from our law firm, spoke about it on our blog during the IT Security Trends event. In the case of a hacking attack on a company or a suspicion of such an attack, reaction time plays a key role. That is why the MSWiA emphasized in their statement that security during both alerts depends on the proper preparation of public facility administrators and on the alertness of businesses and citizens.
Entrepreneur – do not lose vigilance! If you need expert legal advice or consultation on data protection, please contact us.