Category: What’s Happening
Abstract / Executive Summary
Environmental data increasingly underpins decisions about climate mitigation, forest conservation, biodiversity, environmental permitting and climate finance. Governments and development organisations rely on digital registries, geospatial platforms, remote sensing, field data collection and reporting systems to monitor environmental change and demonstrate compliance with national and international commitments. Yet the cybersecurity implications of this digital infrastructure can receive less attention than data collection, analytical capability and public accessibility. This article examines why environmental data systems require dedicated cybersecurity risk management. Drawing on established cybersecurity frameworks, international environmental governance requirements and documented digital systems experience, it analyses threats to data confidentiality, integrity and availability, with particular attention to environmental monitoring and carbon accounting. It argues that the consequences of cyber incidents extend beyond conventional information technology disruption: compromised records can undermine environmental assessments, weaken public accountability and affect the credibility of climate-related decisions. However, the precise likelihood and scale of these consequences remain insufficiently quantified in environmental data contexts. The article proposes a risk-based approach integrating security into system design, data governance, operational monitoring and institutional handover. It also examines implementation constraints, including limited technical capacity, complex data-sharing arrangements and the tension between transparency and security. The central conclusion is that environmental data integrity should be treated as an essential component of environmental governance, rather than a technical concern addressed after a system has been deployed.
Keywords: environmental data; cybersecurity; data integrity; climate governance; geospatial information systems; carbon registries; data governance; digital resilience.
Main article
1. Introduction
Environmental policy increasingly depends on digital evidence. Satellite imagery, forest inventories, emissions measurements, biodiversity observations and environmental permits are collected, processed and shared through interconnected information systems. These systems help governments monitor natural resources, evaluate environmental change, manage regulatory processes and report progress against international commitments.
Digitalisation creates substantial opportunities. It can improve the consistency of environmental records, reduce administrative delays and make information more accessible to decision-makers and the public. However, it also creates dependencies on software, databases, cloud infrastructure, user accounts and third-party services. When these components are compromised, the consequences may extend beyond the organisation responsible for maintaining them.
Cybersecurity is therefore relevant to environmental governance, not simply to information technology management. An unauthorised change to a carbon registry, for example, could affect the reliability of records used to track carbon credits. Altered forest-monitoring data could undermine an assessment of land-use change. A prolonged outage could prevent environmental authorities from accessing information needed for regulatory decisions.
These are plausible risk scenarios, not evidence that such incidents have occurred in any particular environmental system. Publicly available cybersecurity reporting does not yet establish how frequently environmental data platforms experience these specific forms of compromise.
This article examines the question: Why should cybersecurity be treated as a core requirement for environmental data systems, and what practical measures can reduce the associated risks? It combines established cybersecurity guidance with international environmental governance principles and relevant experience in digital environmental systems. Its focus is on institutional platforms used for environmental monitoring, carbon accounting, geospatial analysis and regulatory administration.
2. Understanding the risk: Beyond data confidentiality
Cybersecurity is commonly associated with protecting confidential information from unauthorised access. For environmental systems, that definition is incomplete. Three interconnected properties are particularly important: confidentiality, integrity and availability.
Confidentiality concerns who can access information. Environmental datasets may contain sensitive information about protected species, threatened habitats, land ownership, critical infrastructure or the locations of vulnerable communities. Unrestricted disclosure can create risks even when the underlying information is scientifically accurate.
Integrity concerns whether information remains accurate, complete and protected against unauthorised modification. This is especially significant when environmental data informs decisions about emissions, conservation priorities, regulatory compliance or climate finance. A dataset can remain accessible while its reliability has been compromised.
Availability concerns whether authorised users can access the information and services they need. Ransomware, denial-of-service attacks, infrastructure failures and compromised accounts can interrupt access to monitoring systems or administrative platforms.
The National Institute of Standards and Technology (NIST) addresses these and related concerns through a broader approach to cybersecurity risk management. Its Cybersecurity Framework 2.0 organises outcomes around six functions: Govern, Identify, Protect, Detect, Respond and Recover (Pascoe et al., 2024). This structure is useful for environmental institutions because it connects technical controls with organisational accountability and operational resilience.
Environmental data systems also present a distinctive governance challenge. The value of their records often depends on continuity, traceability and trust across multiple institutions. Protecting a database is not enough if the organisation cannot establish where its data originated, who changed it, which methodology was applied or whether a previous version can be recovered.
3. Why environmental data warrants greater attention
3.1 Data integrity underpins environmental credibility
Environmental datasets are used to establish baselines, measure change and support decisions. Their reliability depends on both scientific methodology and secure information management.
The UNFCCC identifies reliable forest-area and forest-change data as fundamental to national forest monitoring systems used for measuring, reporting and verifying forest-related emissions and removals. Its guidance also emphasises consistency, transparency and suitability for measurement, reporting and verification (United Nations Framework Convention on Climate Change [UNFCCC], n.d.-a).
Cybersecurity does not replace these scientific requirements, but it helps preserve the conditions under which they can be met.
Consider a hypothetical forest-monitoring platform that integrates satellite-derived observations with field inventories. If an attacker alters selected records, changes metadata or compromises the account of an authorised user, the system may continue operating without immediately revealing the problem. Subsequent analysis could then rely on inaccurate inputs.
The appropriate response is not to assume that every discrepancy indicates a cyberattack. Errors can arise from inadequate field procedures, inconsistent definitions, software defects or legitimate methodological changes. Instead, institutions need mechanisms to distinguish these possibilities through version histories, validation rules, documented approvals and independent checks.
3.2 Environmental data can influence financial decisions
Digital environmental systems increasingly support carbon markets, climate-finance programmes and results-based payment mechanisms. Their records may inform decisions about eligibility, performance, verification and disbursement.
A compromised record could therefore have consequences beyond the database itself. In a hypothetical carbon registry, unauthorised changes to credit status or transaction records could create uncertainty about ownership, issuance or retirement. In a climate-finance repository, changes to project information could affect the interpretation of reported progress or the prioritisation of investments.
Such scenarios do not establish that cyber compromise is a common source of environmental financial irregularities. Rather, they illustrate why systems handling financially consequential information need controls appropriate to the decisions they support.
Controls should include separation of duties, documented authorisation for material changes, traceable transaction histories and reconciliation against trusted records. Where the consequences of an incorrect change are substantial, sensitive operations may warrant additional approval or independent verification.
3.3 Environmental information is not always harmless when public
Environmental transparency supports scientific scrutiny, public participation and accountability. UNFCCC guidance on REDD+ safeguards information systems emphasises transparent, consistent and regularly updated information accessible to relevant stakeholders, while recognising national circumstances and capabilities (UNFCCC, n.d.-b).
However, transparency does not mean that every underlying dataset should be unrestricted.
Detailed location records for threatened species, for instance, may create conservation risks if they enable unauthorised collection or disturbance. Environmental monitoring platforms may also contain personal information, confidential submissions or operational details that should not be publicly exposed.
Institutions must therefore distinguish between information intended for public disclosure and information requiring controlled access. Security measures should protect sensitive records without unnecessarily restricting legitimate public access to environmental findings.
3.4 Dependencies expand the attack surface
Environmental platforms rarely operate in isolation. They may rely on cloud hosting, open-source components, geospatial services, mobile applications, external data feeds, institutional identity systems and integrations with other databases.
Each dependency introduces potential failure points. A vulnerability in an external component, an exposed administrative account or an inadequately protected interface can create a route into otherwise well-managed systems.
ENISA’s 2025 threat landscape documents ransomware, data breaches and other forms of cybercrime across European organisations and sectors. These findings establish the wider relevance of availability and data-related threats, but they do not provide a direct measure of environmental-platform exposure (European Union Agency for Cybersecurity [ENISA], 2025).
Environmental institutions should consequently assess the security of the complete data lifecycle, from collection and transfer to storage, analysis, publication and long-term retention. Protecting the central server while neglecting field devices, integration points or privileged accounts leaves important parts of the system exposed.
4. What effective protection requires
4.1 Integrate cybersecurity into system design
Security should be considered during requirements definition and architecture design, rather than added only before launch.
An initial assessment should identify the information held by the system, its intended users, the consequences of unauthorised changes, external dependencies and acceptable periods of service interruption. These findings should inform technical requirements and acceptance criteria.
Practical measures include:
- Role-based access controls that limit users to the functions and records required for their responsibilities.
- Strong authentication for privileged and remote access, with multi-factor authentication where appropriate.
- Encryption for sensitive information in transit and at rest.
- Secure configuration, timely patching and controlled software changes.
- Separation of development, testing and production environments.
- Protected audit logs that record significant access, modifications and administrative actions.
NIST’s security and privacy controls provide a detailed reference for selecting measures related to access control, auditability, system integrity, incident response and contingency planning (Joint Task Force, 2020).
The appropriate implementation will depend on the threat model, available resources and consequences of failure. A small environmental database and a national carbon registry do not necessarily require identical controls.
4.2 Preserve provenance and detect unauthorised changes
Environmental data requires traceability as well as access protection.
Data provenance describes where information originated, how it was processed and which transformations or approvals it underwent. Maintaining provenance makes it easier to identify errors, reproduce analytical results and investigate suspicious changes.
Useful measures include versioned records, metadata standards, validation rules, documented data imports and audit trails. Material changes to environmental indicators or registry transactions should be attributable to an identified user or authorised process.
Independent verification can provide an additional safeguard where records influence consequential decisions. For example, periodic reconciliation between registry transactions and authorised supporting records may reveal discrepancies that routine application monitoring does not detect.
These measures are not substitutes for cybersecurity controls. They complement them by helping institutions determine whether a change was authorised, scientifically justified or potentially malicious.
4.3 Plan for disruption and recovery
Preventing every incident is unrealistic. Environmental institutions should also establish how critical services will be restored.
Backups should be protected against unauthorised modification and deletion, stored separately from the systems they protect where feasible, and tested through actual restoration exercises. Merely confirming that backup files exist does not demonstrate that the institution can recover a usable service.
Incident-response arrangements should identify responsible personnel, escalation routes, communication procedures and decision-making authority. Recovery priorities should reflect the consequences of service disruption, including whether monitoring activities, regulatory processes or reporting deadlines would be affected.
Institutions should also determine how to preserve trustworthy records during recovery. Restoring a database without establishing whether its contents were altered may reintroduce compromised information into production.
4.4 Treat governance and handover as security requirements
Technical controls depend on people and institutions maintaining them. Access rights need periodic review, staff require appropriate training, and responsibilities for patching, monitoring, backups and incident response must be explicit.
This becomes particularly important when digital platforms are developed by external providers and subsequently operated by government or local institutional teams.
A sustainable handover should include system documentation, administrator guidance, an inventory of components and dependencies, backup and restoration procedures, security responsibilities and arrangements for reporting incidents. Training should cover operational tasks, not merely routine use of the application.
NIST’s Cybersecurity Framework 2.0 is relevant here because its governance function places cybersecurity within organisational decision-making rather than treating it solely as a technical activity (Pascoe et al., 2024).
5. Implications for environmental information systems in practice
At Eywa Systems, we believe cybersecurity should be treated as a core component of environmental information systems, rather than a technical consideration added after the platform has been developed. Environmental data supports decisions about natural resource management, climate action and environmental accountability. Protecting this data therefore requires attention not only to who can access a system, but also to whether its information remains accurate, traceable and available when needed.
In practice, this means considering security throughout the system lifecycle. Access permissions should reflect the responsibilities of different users, while audit trails can help establish who has accessed or changed information. Data validation and clear records of data provenance are equally important, particularly when information passes between organisations or is used to support reporting and decision-making. These safeguards need to be supported by appropriate backup, recovery and incident-response arrangements so that environmental information remains usable when systems are disrupted.
We also recognise that technology alone cannot address the full risk. Environmental information systems often depend on multiple stakeholders, operational procedures and locally available technical capacity. Security arrangements must therefore be practical for the organisations responsible for operating and maintaining them. Clear documentation, defined responsibilities and effective knowledge transfer can help ensure that security controls remain part of day-to-day operations rather than becoming dependent on a small number of individuals.
Our view is that trust in environmental data depends on more than collecting and publishing information. It also depends on maintaining the integrity, availability and accountability of the systems behind it. By incorporating cybersecurity and data governance into system design from the outset, organisations can strengthen the reliability of the information they use to manage environmental resources and demonstrate progress towards their commitments.
6. Challenges, limitations and counterarguments
A common objection is that extensive security controls may increase costs, delay implementation or restrict access to information that should remain public. These concerns are legitimate. Poorly designed authentication can frustrate field teams, excessive restrictions can obstruct collaboration, and complex controls may be difficult to sustain in resource-constrained institutions.
The answer is not to apply the maximum possible controls to every system. It is to adopt a risk-based approach that prioritises assets and functions according to the consequences of compromise.
Offline or intermittent connectivity creates additional complexity. Field staff may collect observations in remote locations and synchronise them later. Systems designed for such environments need secure local storage, controlled synchronisation and procedures for resolving conflicting updates without losing traceability.
Open-source software presents another consideration. Its availability can support transparency, adaptability and reduced licensing costs, but it does not remove the need for dependency management, configuration reviews, patching or operational monitoring. Security depends on how components are selected, deployed and maintained.
There are also limits to the available evidence. Cybersecurity incident reports often classify organisations by broad sectors rather than identifying environmental data platforms separately. Public information may not reveal incidents that were not disclosed, while the consequences of an altered environmental record may be difficult to distinguish from ordinary data-quality problems.
Consequently, the argument for protecting environmental data is stronger than any claim that environmental systems experience a particular rate of cyberattack. The governance importance of reliable environmental records is well established; the environmental sector’s specific cyber-risk distribution remains an area requiring further investigation.
7. Conclusion
Environmental data systems support decisions with scientific, financial, regulatory and public-accountability consequences. Their cybersecurity requirements therefore extend beyond keeping information confidential. Institutions must preserve data integrity, maintain availability, control sensitive disclosures and demonstrate how information has been collected, modified and approved.
The most effective approach integrates cybersecurity into system design, data governance, operational monitoring, recovery planning and institutional handover. Controls should be proportionate to the consequences of compromise and practical for the organisations responsible for maintaining them.
The evidence does not establish how frequently environmental data platforms experience cyber incidents or quantify the environmental damage attributable to them. That uncertainty should be acknowledged rather than filled with speculative statistics. It does not, however, justify postponing reasonable safeguards.
Environmental data can only support credible environmental decisions when institutions have good reason to trust the information they use. Cybersecurity is therefore an essential component of environmental data governance and should be addressed from the outset of digital system development, not treated as an afterthought.
References
European Union Agency for Cybersecurity. (2025). ENISA threat landscape 2025. European Union Agency for Cybersecurity. Official publication
Joint Task Force. (2020). Security and privacy controls for information systems and organizations (NIST Special Publication 800-53, Revision 5). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-53r5 NIST Computer Security Resource Center
Pascoe, C., Quinn, S., & Scarfone, K. (2024). The NIST Cybersecurity Framework (CSF) 2.0 (NIST Cybersecurity White Paper 29). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.CSWP.29 NIST
United Nations Framework Convention on Climate Change. (n.d.-a). National forest monitoring system. UNFCCC REDD+ Web Platform. Official guidance
United Nations Framework Convention on Climate Change. (n.d.-b). Safeguards. UNFCCC REDD+ Web Platform. Official guidance