Virtual crime in a virtual world of work

Issue 3 2022 Security Services & Risk Management, Information Security


Iain Massey.

Remote working conditions have opened a new window of opportunity for cybercrime, and online criminals have certainly taken advantage of this opportunity. Iain Massey, senior manager of broker enablement at Indwe, sheds light on the topic of cybercrime in South Africa, and how businesses can mitigate the risks of being the next target.

When the COVID-19 pandemic reached South African shores in early 2020, the ensuing hard lockdown, launched on 27 March 2020, forced companies to abruptly adapt to remote working. Responding quickly, businesses had to source additional laptops, and other technology, and find new ways for previously office-bound staff to continue to work from their homes.

Massey elaborates: “As organisational digital networks branched out into residential homes, more companies have found themselves increasingly vulnerable to cybercrime.”

At the end of 2020, a study conducted by the Center for Strategic and International Studies estimated that malicious cyber activity costs the world $945 billion annually, while Cybersecurity Ventures estimates that global cybercrime costs could increase to $10.5 trillion by 2025. A recent IBM study has also revealed that the average cost of data breaches in South Africa is R48,1 million, a significant loss. The report sheds light on cybercrime as a growing threat to South African businesses:

* Cybercrime is the 4th most reported crime in South Africa and our phishing rate is the highest in the world, with one in every 785 emails identified as a phishing scam.

* Based on an analysis of data breaches experienced by South African organisations, the Ponemon IBM Cost of Data Breach Report 2021 found that the average total cost of a data breach was $1 million, or approximately R15 million higher where remote working is a factor causing the breach.

* The report also stated that the average number of days to identify and contain a breach was 287 days, and the most common cause of malicious attacks globally was stolen or compromised credentials and cloud misconfigurations.

Cybercrime isn’t going away

Virtual retail is now a daily reality, more so post-pandemic than ever before. It’s become necessary for businesses to adapt to the internet being an integral part of their day-to-day operations in the present and the future. To remain in command of cybersecurity in the new technological world, cybersecurity must be central to business, not a mere afterthought, no matter how small or large that business is.

In fact, cybercriminals are now targeting small- and mid-size businesses, as their defences are typically weaker than larger organisations. Once the smaller business’ systems are infiltrated, the cybercriminals might further gain an entry point into larger firms with whom the smaller company does business.

The immediate effect of a cyberattack is an interruption to business services. However, other consequences could include reputational damage, loss of company assets, litigation, loss of business and financial loss.

Massey advises managers, directors and board members to become more involved in ensuring that best practices are implemented and reviewed regularly as the technological landscape continues to change. “It isn’t just the IT division that’s responsible for cybersecurity. The whole company needs to be involved and aware of the plans and processes that are in place to mitigate cybersecurity risk. If a staff member plugs a flash drive into their laptop to copy a document and it contains a virus, this affects the entire company connected to their network.”

It’s now considered a matter of course that organisations offer full training to employees on data security and cyber threats and that all staff abide by a clean desk policy, which includes storing confidential documents in a safe place, whether in the office or at home. It’s also essential that all employee, client, customer, and supplier data is stored and protected to comply with PoPIA.

For individuals and organisations in South Africa, cyberattacks are an increasing reality, which is why it’s paramount to take steps to protect yourself and your data, thereby reducing the risk of becoming a cybercrime victim.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Background checks: risk levels and compliance
iFacts Access Control & Identity Management Security Services & Risk Management
Conducting background checks is a vital step in the hiring process for employers or when engaging service providers; however, it is crucial to understand the legal framework and regulations governing these checks.

Read more...
Identity is a cyber issue
Access Control & Identity Management Information Security
Identity and access management telemetry has emerged as the most common source of early threat detection, responsible for seven of the top 10 indicators of compromise leading to security investigations.

Read more...
From the Editor's desk: Apathy is a cybercriminal
Technews Publishing News & Events
      Welcome to SMART Security Solutions’ first print publication of the year, the SMART Access & Identity Handbook 2025. This year’s print issue is smaller than usual, so we include some articles in the ...

Read more...
Federated identity orchestration
Technews Publishing SMART Security Solutions Editor's Choice Access Control & Identity Management Security Services & Risk Management AI & Data Analytics
Understanding exactly who resides at the end of a digital device is key, and simple identity number verification by the Department of Home Affairs is no longer a viable solution on its own.

Read more...
Managing identities for 20 years
Ideco Biometrics Technews Publishing SMART Security Solutions Access Control & Identity Management Integrated Solutions IoT & Automation
Many companies are now more aware of the risks associated with unauthorised access to locations and sensitive data and are investing in advanced identity authentication technologies to mitigate these threats.

Read more...
Balancing security and ease-of-use
Technews Publishing SMART Security Solutions Access Control & Identity Management Security Services & Risk Management
Fraud incidents have financial repercussions and erode consumer trust, leading businesses to become more aware, though this awareness does not necessarily translate into confidence in their identity authentication processes.

Read more...
Identity and authentication
Technews Publishing SMART Security Solutions Access Control & Identity Management Information Security Security Services & Risk Management
Identity authentication is a crucial aspect of both physical security and cybersecurity. SMART Security Solutions obtained insights into the topic and the latest developments from three companies.

Read more...
Integration and IoT made easy
Technews Publishing SMART Security Solutions Access Control & Identity Management
The security industry is built on silos, be it surveillance, access control, alarms and others, but integration has become a critical issue in recent years. SMART Security Solutions speaks to Integr8 Systems about its local hardware and software.

Read more...
Mobile credentials taking off
Technews Publishing SMART Security Solutions Paxton Secutel Technologies Access Control & Identity Management
Mobile smartphone access is becoming more common, with use cases ranging from Bluetooth, NFC (Near-Field Communication), or QR codes to manage secure access to commercial and personal locations.

Read more...
SMARTpod talks to Armata’s Richard Frost
Technews Publishing SMART Security Solutions Videos
SMARTpod, the podcast by SMART Security Solutions, recently spoke to Richard Frost from Armata about the company's new 'all-in-one' cybersecurity bundle designed to relieve cyber stress in the SMB market.

Read more...