What keeps you up at night

Issue 9 2020 Editor's Choice

As is often said, Africa is not a country, and few things bring this fact home more than KnowBe4's African edition of its annual What Keeps You up at Night Report. The 2020 edition, now available, conducted surveys in 18 African countries, asking more than 500 organisations about their concerns across a variety of security topics.

Additionally, the report provides specific survey details on the three sub-Saharan giants: Kenya, Nigeria and South Africa. These snapshots are surprising in their variations as well as overlaps. What concerns one of the economic powerhouses is not necessarily a priority for the others, and it's an eye-opener around Africa's diverse security challenges.

"It's a known fact that African countries and organisations are being targeted more actively by cybercriminals, to the level that it's one of the fastest-growing regions in terms of cybercrime," said Anna Collard, senior vice president of content strategy and evangelist, KnowBe4 Africa. "But when you get down to the specifics, the differences between the survey's continental averages and its three biggest sub-Saharan economies are quite striking."

The three respective appendices of the report make for captivating reading. Spread across six main categories – cyber threats, compliance security, security initiatives, users, resources and executive issues – here is a snapshot for each country:

Kenya: In general, Kenya is split on the priorities of security threats such as phishing and ransomware. On average, at least half of organisations don't regard these and other threats as more than somewhat concerning – considerably lower than the continental totals. But that also means that the other half of the organisations rank such threats as very concerning, with 31% saying they are kept awake at night by the possibility of business email compromise.

Kenya's concerns over security initiatives mirror the continent's worries: 46% are kept awake at night about security awareness training and supply chain security. In contrast, the country is not as concerned about different user security issues. African averages lean more towards extreme concerns, yet Kenya's focus tends to split between somewhat and very concerned.

Nigeria: Nigeria is the clear outlier in security matters, taking some very different views on what to be concerned about. On the one hand, no country is more worried about ransomware: 59% of Nigerian companies say this keeps them up at night, though 40% are only somewhat concerned. Malware attracts a similar split. Yet 74% of Nigerian companies are only somewhat concerned about data breaches.

They are not worried much about security initiatives. Only multi-factor authentication truly keeps them awake at night (74%), while the next massive concern, identity management, sits at 27%. Here's the kicker: 89% of organisations there are not at all concerned about security awareness training. When user risks do surface, two types of users solicit similar levels of security concerns – remote workers (67%) and negligent workers (41%). 87% of Nigerian companies are somewhat concerned about malicious insiders, and 69% about password sharing.

South Africa: Attitudes in South Africa align closely with the continent's averages, though there are some differences. While other countries tend to worry most about ransomware, South African organisations rank phishing as extremely (46%) and very (35%) concerning. Malware and business email compromise reflect similar levels of worry and though ransomware is lower than these categories, at 50% it's the threat keeping most businesses awake at night.

South African views around security initiatives almost mirror those of Kenya: 46% are extremely concerned about security awareness training and supply chain security. 38% are also being kept awake by privileged access management, incident response, securing the cloud and multi-factor authentication. Remote workers keep 57% of South African companies up at night, while negligent insiders (44%) and users sharing passwords (41%) are not far behind.

Download the report at https://info.knowbe4.com/what-keeps-you-up-at-night-report-af




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Deepfakes and digital trust
Editor's Choice
By securing the video right from the specific camera that captured it, there is no need to prove the chain of custody for the video, you can verify the authenticity at every step.

Read more...
A new generational framework
Editor's Choice Training & Education
Beyond Generation X, and Millennials, Dr Chris Blair discusses the seven decades of technological evolution and the generations they defined, from the 1960’s Mainframe Cohort, to the 2020’s AI Navigators.

Read more...
Back-up securely and restore in seconds
Betatrac Telematic Solutions Editor's Choice Information Security Infrastructure
Betatrac has a solution that enables companies to back-up up to 8 TB of data onto a device and restore it in 30 seconds in an emergency, called Rapid Access Data Recovery (RADR).

Read more...
Key design considerations for a control room
Leaderware Editor's Choice Surveillance Training & Education
If you are designing or upgrading a control room, or even reviewing or auditing an existing control room, there are a number of design factors that one would need to consider.

Read more...
CCTV control room operator job description
Leaderware Editor's Choice Surveillance Training & Education
Control room operators are still critical components of security operations and will remain so for the foreseeable future, despite the advances of AI, which serves as a vital enhancement to the human operator.

Read more...
A passport to offline backups
SMART Security Solutions Technews Publishing Editor's Choice Infrastructure Smart Home Automation
SMART Security Solutions tested a 6 TB WD My Passport and found it is much more than simply another portable hard drive when considering the free security software the company includes with the device.

Read more...
Navigating the complexities of privileged access management
Editor's Choice Access Control & Identity Management
Privileged Access Management and Identity Access Management are critical pillars of modern cybersecurity, designed to secure access to sensitive resources, enforce principles like least privilege, and implement just-in-time access controls.

Read more...
Rewriting the rules of reputation
Technews Publishing Editor's Choice Security Services & Risk Management
Public Relations is more crucial than ever in the generative AI and LLMs age. AI-driven search engines no longer just scan social media or reviews, they prioritise authoritative, editorial content.

Read more...
Efficient, future-proof estate security and management
Technews Publishing ElementC Solutions Duxbury Networking Fang Fences & Guards Secutel Technologies OneSpace Technologies DeepAlert SMART Security Solutions Editor's Choice Information Security Security Services & Risk Management Residential Estate (Industry) AI & Data Analytics IoT & Automation
In February this year, SMART Security Solutions travelled to Cape Town to experience the unbelievable experience of a city where potholes are fixed, and traffic lights work; and to host the Cape Town SMART Estate Security Conference 2025.

Read more...
Historic Collaboration cuts ATM Bombings by 30%
Online Intelligence Editor's Choice News & Events Security Services & Risk Management
Project Big-Bang, a collaborative industry-wide task team, has successfully reduced ATM bombings in South Africa by 30,7% during the predetermined measurement period of November, December and January 2024/5.

Read more...