As countries prepare to meet in Dubai to decide the future of the postal sector, digitization of the postal network and its services will be at the forefront of discussions. The UPU’s Postal Technology Centre stands ready to help secure the sector as it moves ever more online.
As the postal network evolves to meet the demands of e-commerce, its reliance on digital tools and processes has grown significantly. This has led to a paradigm shift in the way international postal items move across borders.Where data once followed a postal item, now data determines how and when it moves. This transformation has strengthened the physical security of the network, enabling customs and supply chain partners to access more detailed information about postal contents than ever before.
While digital tools have improved efficiency and physical security, they also introduce new risks. Postal operators are increasingly targeted for cyberattacks. Just like a disruption to physical postal infrastructure, an attack on digital systems can threaten international operations, expose sensitive personal data and, most critically, erode customer trust. Ensuring confidence in the security of the postal network is vital as posts position themselves as the preferred e-commerce delivery partner to platforms and e-sellers.
Powered by the experiences, drive and collaboration of a network of 192 countries, the UPU is a cybersecurity leader for the entire sector. Its role as the trailblazer was reaffirmed at the 2023 Extraordinary Congress in Riyadh, where member countries agreed to allocate part of their exceptional increase in regular budget towards cyber-resilience activities for the UPU’s secretariat, the International Bureau.
Establishing a centre for cyber-resilience
The support received in Riyadh enabled us to also explore more ways the UPU pioneer cyber resilience for the entire postal supply chain – from developing new cybersecurity tools and standards, to capacity-building and collaboration with the private sector.
We held our inaugural UPU Cybersecurity Forum in 2024, which yielded insights that helped confirm a revolutionary idea proposed by Italy that the UPU could be the initiator of the first-ever Information Sharing and Analysis Centre (ISAC) for the postal sector – the POST-ISAC. The POST-ISAC will become a platform for sharing critical information on security threats, incidents and best practices across the entire sector – from governments, regulators and designated postal operators, to wider postal sector players and partners.
Through this platform they will be able to share intelligence, collaborate on resilience strategies, coordinate incident response efforts, participate in training, exchange ideas between the private and public sectors, and conduct research to stay ahead of cybercriminals.
This initiative will empower member countries to proactively strengthen cybersecurity and build resilience across the global network.
.POST as a secure foundation
The POST-ISAC vision builds on the success of .POST, the exclusive and top-level domain for the postal sector. Thanks to the leadership of the .POST Steering Committee – comprised of Italy, USA, Ethiopia, China, Nigeria and Senegal – we’ve laid the groundwork for providing member countries with cybersecurity support services.
This includes a framework established to protect their domains against hijacking, phishing and spoofing. .POST Group members have also had access to awareness materials and specialized cybersecurity training.
The UPU will expand this proven model to support the broader goals of the POST-ISAC.
Ongoing support needed
With support from the Riyadh Congress, extrabudgetary funds – including from the Japan and US Tied Funds – and the efforts of the .POST Group, the UPU’s Postal Technology Centre has laid the groundwork for the POST-ISAC. But broader engagement across the sector is essential to bring the project to life.
The upcoming Universal Postal Congress in Dubai offers a pivotal opportunity. Plans for the POST-ISAC are included within the work proposals of the Dubai Business Plan, aligned with the organization’s strategy for the next four years. This September, the UPU’s member countries will again have the chance to prioritize funding for cybersecurity.
Tracy Hackshaw
Head, .POST Business Management Unit, Postal Technology Centre, Universal Postal Union
Mayssam Sabra
.POST Programme Assistant, Postal Technology Centre, Universal Postal Union
Tracy Hackshaw and Mayssam Sabra co-author this blog as part of their work on the .POST initiative, under the direction of Lati Matata, Director of the UPU’s Postal Technology Centre.