Virtual crime in a virtual world of work

Issue 3 2022 Security Services & Risk Management, Cyber Security

Iain Massey.

Remote working conditions have opened a new window of opportunity for cybercrime, and online criminals have certainly taken advantage of this opportunity. Iain Massey, senior manager of broker enablement at Indwe, sheds light on the topic of cybercrime in South Africa, and how businesses can mitigate the risks of being the next target.

When the COVID-19 pandemic reached South African shores in early 2020, the ensuing hard lockdown, launched on 27 March 2020, forced companies to abruptly adapt to remote working. Responding quickly, businesses had to source additional laptops, and other technology, and find new ways for previously office-bound staff to continue to work from their homes.

Massey elaborates: “As organisational digital networks branched out into residential homes, more companies have found themselves increasingly vulnerable to cybercrime.”

At the end of 2020, a study conducted by the Center for Strategic and International Studies estimated that malicious cyber activity costs the world $945 billion annually, while Cybersecurity Ventures estimates that global cybercrime costs could increase to $10.5 trillion by 2025. A recent IBM study has also revealed that the average cost of data breaches in South Africa is R48,1 million, a significant loss. The report sheds light on cybercrime as a growing threat to South African businesses:

* Cybercrime is the 4th most reported crime in South Africa and our phishing rate is the highest in the world, with one in every 785 emails identified as a phishing scam.

* Based on an analysis of data breaches experienced by South African organisations, the Ponemon IBM Cost of Data Breach Report 2021 found that the average total cost of a data breach was $1 million, or approximately R15 million higher where remote working is a factor causing the breach.

* The report also stated that the average number of days to identify and contain a breach was 287 days, and the most common cause of malicious attacks globally was stolen or compromised credentials and cloud misconfigurations.

Cybercrime isn’t going away

Virtual retail is now a daily reality, more so post-pandemic than ever before. It’s become necessary for businesses to adapt to the internet being an integral part of their day-to-day operations in the present and the future. To remain in command of cybersecurity in the new technological world, cybersecurity must be central to business, not a mere afterthought, no matter how small or large that business is.

In fact, cybercriminals are now targeting small- and mid-size businesses, as their defences are typically weaker than larger organisations. Once the smaller business’ systems are infiltrated, the cybercriminals might further gain an entry point into larger firms with whom the smaller company does business.

The immediate effect of a cyberattack is an interruption to business services. However, other consequences could include reputational damage, loss of company assets, litigation, loss of business and financial loss.

Massey advises managers, directors and board members to become more involved in ensuring that best practices are implemented and reviewed regularly as the technological landscape continues to change. “It isn’t just the IT division that’s responsible for cybersecurity. The whole company needs to be involved and aware of the plans and processes that are in place to mitigate cybersecurity risk. If a staff member plugs a flash drive into their laptop to copy a document and it contains a virus, this affects the entire company connected to their network.”

It’s now considered a matter of course that organisations offer full training to employees on data security and cyber threats and that all staff abide by a clean desk policy, which includes storing confidential documents in a safe place, whether in the office or at home. It’s also essential that all employee, client, customer, and supplier data is stored and protected to comply with PoPIA.

For individuals and organisations in South Africa, cyberattacks are an increasing reality, which is why it’s paramount to take steps to protect yourself and your data, thereby reducing the risk of becoming a cybercrime victim.

For more information about cybercrime insurance, contact 0860 13 13 14 or [email protected]


Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Cyber resilience is more than cybersecurity
Technews Publishing Cyber Security Integrated Solutions IT infrastructure
Hi-Tech Security Solutions held a round-table discussion focusing on cyber resilience and found that while the resilience discipline includes cybersecurity, it also goes much further.

Numerous challenges for transport and logistics
Transport (Industry) CCTV, Surveillance & Remote Monitoring Security Services & Risk Management Logistics (Industry)
Operators are making significant investments in automation and digitalisation in order to address security concerns, improve loss prevention as well as efficiency, and reduce unit order costs.

Defining the resilience of cybersecurity
Cyber Security Security Services & Risk Management
Cyber resilience is less buzzword and more critical business strategy as the cybercrime landscape grows in intent and intensity.

From the editor's desk: Security and resilience
Technews Publishing News
It’s often said that South Africans are a resilient bunch, and history has proven this correct. When it comes to security, both cyber and physical, resilience is key to an effective defensive plan. ...

Hikvision aims for solutions
Technews Publishing Hikvision South Africa Editor's Choice CCTV, Surveillance & Remote Monitoring News Integrated Solutions Conferences & Events
Hikvision recently held a roadshow titled Industry X, where the company highlighted its latest products and solutions, supported by partners and distributors.

ADI Expo returns to South Africa
Technews Publishing ADI Global Distribution News
September saw the return of the ADI Expo to South Africa. The Johannesburg event was held at the Focus Rooms and the Durban event, two days later, at the Southern Sun Elangeni & Maharani.

Technoswitch Awards dinner for 2022
Technews Publishing News Fire & Safety
Technoswitch hosted its fifth awards dinner at Montecasino in September, where customers and suppliers celebrated a year of success.

Reliable, low-maintenance video appliances
Technews Publishing Editor's Choice CCTV, Surveillance & Remote Monitoring News IT infrastructure Products
Symetrix, part of the Agera Group, has added the AES range of video recording servers, storage appliances and workstations to its portfolio.

Technology and the future of security installation in South Africa
Editor's Choice Integrated Solutions Security Services & Risk Management
What are the technologies and trends shaping installation, service and maintenance teams globally, and how will they shape South African businesses today and in the future?

The technology wave implications for staff mismatches in control rooms
Leaderware Editor's Choice Security Services & Risk Management
An industry habit of looking at control rooms through a physical security lens has increasingly left clients and staff at a disadvantage in keeping up with control room technology and demands.