SA firms take nine months to detect data breaches

August 2024 Information Security, Security Services & Risk Management

A human being can be conceived and brought into the world roughly the same time it takes for a South African small and medium-sized enterprise (SME) to become aware of and report a data breach.

That’s according to Jaco Voigt, Managing Director of PerfectWorx Consulting, a Cisco technology ecosystem provider. This timeframe broadly aligns with the 277 days mentioned in IBM’s 2022 data security report.

“The bad actors have become so sly that nothing happens immediately when one clicks on that dodgy link. A false sense of security is created, particularly at under-resourced smaller firms that often cobble together defences using consumer-grade cybersecurity solutions,” says Voigt.

“In my experience, stolen or compromised credentials are the most common cause of a data breach, and these attacks usually take the longest for local firms to identify.”

With people's behaviour within the business as the most significant security variable for early-stage firms, it’s clear that small businesses require an additional layer of automated breach protection.

Deploying cybersecurity protection at the DNS layer is where SMEs will experience the most immediate benefits. DNS layer protection essentially protects users from websites that host dangerous content.

When employees attempt to access problematic sites, and the SME has a solution like Cisco Umbrella enabled, the request to access the potentially dangerous site would be denied at the DNS layer. Rolling out a DNS layer cybersecurity solution is a practical first line of defence against phishing and the malware and ransomware attempting to access users’ devices via dangerous sites controlled by bad actors.

With these cloud-delivered cybersecurity solutions focused on unsafe webpages, smaller firms can gain a new layer of breach protection, in minutes, that also offers unparalleled internet-wide visibility.

Essentially, DNS layer solutions protect devices and users by controlling the transfer of information between such devices and the internet at large. “Over 30 000 local and overseas customers have found that Cisco Umbrella provides the quickest, most effective way to improve the SME’s security stack. Data breaches start – and end – at the DNS layer,” concludes Voigt.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Fire safety in South Africa
Technoswitch Fire Detection & Suppression Technews Publishing SMART Security Solutions Editor's Choice Fire & Safety Security Services & Risk Management
Fire safety is sometimes ignored, sometimes relegated to whatever is cheapest, and sometimes treated with the seriousness it deserves, given that it focuses on protecting life and assets. SMART Security Solutions asked Brett Birch, MD of Technoswitch, for some insights into the realities of fire safety in South Africa.

Read more...
A risk-based approach to fire safety
Fire & Safety Security Services & Risk Management Industrial (Industry) Agriculture (Industry)
A report by fire engineering consultancy ASP Fire is challenging blanket assumptions around combustible-core sandwich panels, arguing instead for a rational, risk-based approach that balances fire safety requirements with commercial realities in sectors such as agriculture, manufacturing and industrial processing.

Read more...
Preventing and suppressing lithium fires
SMART Security Solutions Technews Publishing Editor's Choice Fire & Safety Security Services & Risk Management Smart Home Automation
SMART Security Solutions asked Clyde Becker, director of Pyro Brand, for some insight into the mechanics of lithium-ion battery fire risks, especially thermal runaway, and to define a comprehensive, layered approach to fire detection and suppression.

Read more...
Cybersecurity needs actual intelligence before artificial intelligence
Information Security AI & Data Analytics
Cybersecurity depends on interpretation. A tool can tell you that something unusual has happened, but people need to determine whether it is a genuine risk, the business impact, and how to respond without causing unnecessary disruption.

Read more...
Duxbury Cybersecurity sharpens reseller offering
Duxbury Networking Information Security News & Events
Duxbury Networking has strengthened its Duxbury Cybersecurity business unit by adding WatchGuard and Cynet, giving South African resellers broader, more integrated coverage for the security risks customers are now asking them to address.

Read more...
Echoes of 2018? Follow-up on Woolworths explosions
Technews Publishing News & Events Security Services & Risk Management Retail (Industry) Facilities & Building Management
SMART Security Solutions follows up with Jimmy Roodt to find out more about an old connection to the Woolworths bombings from 2018. The investigation remains ongoing.

Read more...
NEC XON detects and stops ransomware attack
NEC XON Information Security IoT & Automation
Ransomware attacks rarely begin with chaos. More often, they start quietly, with probing, mapping, and patient reconnaissance inside a target’s network. That was the situation facing a global recruitment firm when cybercriminals attempted to navigate its systems.

Read more...
Next-generation cash-in-transit vehicle
News & Events Security Services & Risk Management
Fidelity Services Group has unveiled a new, purpose-engineered Cash-in-Transit (CIT) vehicle designed to redefine crew protection, deter threats, and enhance operational resilience in an increasingly complex criminal environment.

Read more...
Sara AI Pentesting available in South Africa
Information Security News & Events
Synack and Wolfpack Information Risk are offering Sara AI Pentesting to organisations across South Africa, helping companies move from point-in-time testing to continuous security validation with AI and human expertise.

Read more...
Sophos establishes South African legal entity to strengthen local operations
News & Events Information Security
Global cybersecurity company, Sophos, has announced the formation of its local legal entity, which will support local invoicing, partner enablement, compliance requirements and expanded regional investment.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.