RSK-0042Government Network Cybersecurity Programme
Undetected gaps in old ministry systems before they join the SOC
A risk's detail, response, contingency and residual risk.
Risk statement
From cause to event to impact — with the preventive controls before the event and the contingency after it
Cause
Legacy systems holding citizen data without regular security patching
Preventive controls
- A full vulnerability scan and fix the critical ones
- Continuous monitoring from the SOC
2 / 2
Event
Undetected gaps in old ministry systems before they join the SOC
An unpatched critical vulnerability found
Contingency
Isolate affected systems and run the response plan
Impact
Leaked citizen data, or a delayed national cybersecurity compliance sign-off
Assessment
The level before and after the response
Inherent
Residual
Exposure
SYP 75M
Residual
60% off the score
Score trend
Last six months
- Score
- Target residual
Escalation path
Escalation engine: a high risk unreviewed for 10 days notifies the PM, 15 the programme manager, 20 the PMO director
Last reviewed 2 days ago · Outside the engine — below «high»
Project manager
Current levelEng. Hussam Zeidan
Currently followed up here- 2
Programme manager
Eng. George Haddad
- 3
PMO director
Dr. Reem Al-Qabbani
- 4
Executive Council
Dr. Samer Al-Daqqar
By the PMO director’s decision
Mitigation plan
Each action with its owner and date — tick it off when complete
A full vulnerability scan and fix the critical ones
Eng. Hussam ZeidanEng. Hussam ZeidanDirector, CybersecurityP-026hussam.zeidan@psa.gov.syIn progressIn 34 days2026-12-01Continuous monitoring from the SOC
Eng. Hussam ZeidanEng. Hussam ZeidanDirector, CybersecurityP-026hussam.zeidan@psa.gov.syNot startedIn 34 days2026-12-01
Trigger
An unpatched critical vulnerability found
Contingency
Isolate affected systems and run the response plan