July 26, 2017 By David Strom 2 min read

Lots of companies have disaster recovery data centers located far from their headquarters, but Estonia is the first government to build an off-site data center in another country. The small Baltic nation will make backup copies of its critical data infrastructure and store them in Luxembourg if agreements between the two countries are reached.

The idea is that Estonia could continue operating outside its borders in the event of a war or natural disaster. Officials from Luxembourg will be barred from accessing the Estonian data, just like they would be restricted from entering another country’s embassy. “In a digital world, we have to put aside old concepts of nations’ borders,” said Gilles Feith, the head of the Luxembourg government’s IT activities, according to DW.

Establishing a Data Embassy

This is a real issue for Estonia, which faced weeks of distributed denial-of-service (DDoS) attacks that took down major banking and communications infrastructure several years ago. Since then, DW reported, Estonia “began storing some of its noncritical digital infrastructure, including information on its roads and government operations, in privately owned public clouds like Amazon Web Services and Microsoft Azure.” Meanwhile, Estonia’s laws are all stored in digital formats, without any paper copies.

The move toward a “data embassy” is about ensuring Estonia’s digital continuity. “It’s only one piece of the puzzle” to maintain trust in the digital society, said Liis Rebane, Estonia’s head of cybersecurity policy, as quoted in DW.

Off-Site Data Center to Facilitate Digitization Efforts

Estonia has been at the forefront of numerous other digital initiatives, including creating digital IDs for every citizen and business. Companies that aren’t located in Estonia can register for these digital certificates and create bank accounts online. But the country needs to continue to innovate and collaborate with other nations, Andrus Ansip, vice president of the European Commission and former prime minister of Estonia, told EURACTIV.

“I don’t think Estonia is perfect enough to teach other countries using its own example,” he said. Ansip also noted that other countries, such as Denmark, are taking leading positions in digitizing their business operations.

He called for cooperation among EU member countries to share threat data and operational responses. Given that the European Computer Emergency Response Team (CERT) has only 30 staff members, this will be essential for combating future cyberthreats.

Read the Interactive Solution Brief: Ready, Set, GDPR

More from Government

CIRCIA feedback update: Critical infrastructure providers weigh in on NPRM

3 min read - In 2022, the Cyber Incident for Reporting Critical Infrastructure Act (CIRCIA) went into effect. According to Secretary of Homeland Security Alejandro N. Mayorkas, "CIRCIA enhances our ability to spot trends, render assistance to victims of cyber incidents and quickly share information with other potential victims, driving cyber risk reduction across all critical infrastructure sectors."While the law itself is on the books, the reporting requirements for covered entities won't come into force until CISA completes its rulemaking process. As part of…

Important details about CIRCIA ransomware reporting

4 min read - In March 2022, the Biden Administration signed into law the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA). This landmark legislation tasks the Cybersecurity and Infrastructure Security Agency (CISA) to develop and implement regulations requiring covered entities to report covered cyber incidents and ransomware payments.The CIRCIA incident reports are meant to enable CISA to:Rapidly deploy resources and render assistance to victims suffering attacksAnalyze incoming reporting across sectors to spot trendsQuickly share information with network defenders to warn other…

Unpacking the NIST cybersecurity framework 2.0

4 min read - The NIST cybersecurity framework (CSF) helps organizations improve risk management using common language that focuses on business drivers to enhance cybersecurity.NIST CSF 1.0 was released in February 2014, and version 1.1 in April 2018. In February 2024, NIST released its newest CSF iteration: 2.0. The journey to CSF 2.0 began with a request for information (RFI) in February 2022. Over the next two years, NIST engaged the cybersecurity community through analysis, workshops, comments and draft revision to refine existing standards…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today