SA firms take nine months to detect data breaches

August 2024 Information Security, Security Services & Risk Management

A human being can be conceived and brought into the world roughly the same time it takes for a South African small and medium-sized enterprise (SME) to become aware of and report a data breach.

That’s according to Jaco Voigt, Managing Director of PerfectWorx Consulting, a Cisco technology ecosystem provider. This timeframe broadly aligns with the 277 days mentioned in IBM’s 2022 data security report.

“The bad actors have become so sly that nothing happens immediately when one clicks on that dodgy link. A false sense of security is created, particularly at under-resourced smaller firms that often cobble together defences using consumer-grade cybersecurity solutions,” says Voigt.

“In my experience, stolen or compromised credentials are the most common cause of a data breach, and these attacks usually take the longest for local firms to identify.”

With people's behaviour within the business as the most significant security variable for early-stage firms, it’s clear that small businesses require an additional layer of automated breach protection.

Deploying cybersecurity protection at the DNS layer is where SMEs will experience the most immediate benefits. DNS layer protection essentially protects users from websites that host dangerous content.

When employees attempt to access problematic sites, and the SME has a solution like Cisco Umbrella enabled, the request to access the potentially dangerous site would be denied at the DNS layer. Rolling out a DNS layer cybersecurity solution is a practical first line of defence against phishing and the malware and ransomware attempting to access users’ devices via dangerous sites controlled by bad actors.

With these cloud-delivered cybersecurity solutions focused on unsafe webpages, smaller firms can gain a new layer of breach protection, in minutes, that also offers unparalleled internet-wide visibility.

Essentially, DNS layer solutions protect devices and users by controlling the transfer of information between such devices and the internet at large. “Over 30 000 local and overseas customers have found that Cisco Umbrella provides the quickest, most effective way to improve the SME’s security stack. Data breaches start – and end – at the DNS layer,” concludes Voigt.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...
What’s in store for PAM and IAM?
Access Control & Identity Management Information Security
Leostream predicts changes in Identity and Access Management (IAM) and Privileged Access Management (PAM) in the coming year, driven by evolving cybersecurity realities, hybridisation, AI, and more.

Read more...
The challenges of cybersecurity in access control
Technews Publishing SMART Security Solutions Access Control & Identity Management Information Security
SMART Security Solutions summarises the key points dealing with modern cyber risks facing access control systems, from Mercury Security’s white paper “Meeting the Challenges of Cybersecurity in Access Control: A Future-Ready Approach.”

Read more...
Securing your access hardware and software
SMART Security Solutions Technews Publishing RBH Access Technologies Access Control & Identity Management Information Security
Securing access control technology is critical for physical and digital security. Every interaction between readers, controllers, and host systems creates a potential attack point for those with nefarious intent.

Read more...
From friction to trust
Information Security Security Services & Risk Management Financial (Industry)
Historically, fraud prevention has been viewed as a trade-off between robust security and a seamless customer journey, with security often prevailing. However, this can impair business functionality or complicate the customer journey with multiple logins and authentication steps.

Read more...
Phishing and social engineering are the most significant risks
News & Events Information Security
ESET Research found that phishing accounted for 45,7% of all detected cyberthreats in South Africa, with higher-quality deepfakes, signs of AI-generated phishing websites, and short-lived advertising campaigns designed to evade detection.

Read more...
Security ready to move out of the basement
AI & Data Analytics Security Services & Risk Management
Panaseer believes that in 2026, a board member at a major corporation will lose their job amid rising breaches and legal scrutiny, as organisations recognise that cyber risk is a business risk that CISOs cannot shoulder alone.

Read more...
Cyber remains top business risk, but AI fastest riser at #2
News & Events Security Services & Risk Management
The Allianz Risk Barometer 2026 ranks cybersecurity, especially ransomware attacks, as the #1 risk, while AI is the biggest riser and jumps from #10 to #2, highlighting the emerging risks for companies in almost all industry sectors.

Read more...
Zero Trust access control
Technews Publishing SMART Security Solutions CASA Software NEC XON Editor's Choice Access Control & Identity Management Information Security
Zero Trust Architecture enforces the rule of ‘never trust, always verify’. It changes an organisation’s security posture by assuming that threats exist both inside and outside the perimeter, and it applies to information and physical security.

Read more...
OT calculator to align cyber investments with business goals
Industrial (Industry) Information Security Security Services & Risk Management
The OT Calculator has been developed specifically for industrial organisations to assess the potential costs of insufficient operational technology (OT) security. By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.