🟡 Medium | Source: The Register — Security
CAF Bank has restored online banking services after more than ten days of downtime, though customers have been warned that further outages and traffic throttling may occur. The extended disruption raises questions about the resilience and incident recovery capabilities of the bank’s underlying infrastructure. For a financial institution, prolonged unavailability of customer-facing services signals significant gaps in business continuity planning or points to a serious underlying incident.
Security Architect’s Take: Use this as a prompt to review your own organisation’s RTO and RPO targets, and validate that failover and traffic-shaping mechanisms are tested under realistic load conditions. Ensure incident communications plans are in place so customers and stakeholders receive timely, transparent updates during extended outages.
Original advisory: CAF Bank reopens online service but warns of further outages