SA firms take nine months to detect data breaches

August 2024 Information Security, Security Services & Risk Management

A human being can be conceived and brought into the world roughly the same time it takes for a South African small and medium-sized enterprise (SME) to become aware of and report a data breach.

That’s according to Jaco Voigt, Managing Director of PerfectWorx Consulting, a Cisco technology ecosystem provider. This timeframe broadly aligns with the 277 days mentioned in IBM’s 2022 data security report.

“The bad actors have become so sly that nothing happens immediately when one clicks on that dodgy link. A false sense of security is created, particularly at under-resourced smaller firms that often cobble together defences using consumer-grade cybersecurity solutions,” says Voigt.

“In my experience, stolen or compromised credentials are the most common cause of a data breach, and these attacks usually take the longest for local firms to identify.”

With people's behaviour within the business as the most significant security variable for early-stage firms, it’s clear that small businesses require an additional layer of automated breach protection.

Deploying cybersecurity protection at the DNS layer is where SMEs will experience the most immediate benefits. DNS layer protection essentially protects users from websites that host dangerous content.

When employees attempt to access problematic sites, and the SME has a solution like Cisco Umbrella enabled, the request to access the potentially dangerous site would be denied at the DNS layer. Rolling out a DNS layer cybersecurity solution is a practical first line of defence against phishing and the malware and ransomware attempting to access users’ devices via dangerous sites controlled by bad actors.

With these cloud-delivered cybersecurity solutions focused on unsafe webpages, smaller firms can gain a new layer of breach protection, in minutes, that also offers unparalleled internet-wide visibility.

Essentially, DNS layer solutions protect devices and users by controlling the transfer of information between such devices and the internet at large. “Over 30 000 local and overseas customers have found that Cisco Umbrella provides the quickest, most effective way to improve the SME’s security stack. Data breaches start – and end – at the DNS layer,” concludes Voigt.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Who are you?
Access Control & Identity Management Information Security
Who are you? This question may seem strange, but it can only be answered accurately by implementing an Identity and Access Management (IAM) system, a crucial component of any company’s security strategy.

Read more...
Check Point launches African Perspectives on Cybersecurity report
News & Events Information Security
Check Point Software Technologies released its African Perspectives on Cybersecurity Report 2025, revealing a sharp rise in attacks across the continent and a major shift in attacker tactics driven by artificial intelligence

Read more...
What is your ‘real’ security posture?
BlueVision Editor's Choice Information Security Infrastructure AI & Data Analytics
Many businesses operate under the illusion that their security controls, policies, and incident response plans will hold firm when tested by cybercriminals, but does this mean you are really safe?

Read more...
What is your ‘real’ security posture? (Part 2)
BlueVision Editor's Choice Information Security Infrastructure
In the second part of this series of articles from BlueVision, we explore the human element: social engineering and insider threats and how red teaming can expose and remedy them.

Read more...
Sophos announces evolution of its security operations portfolio
Information Security
Sophos has announced significant enhancements to its security operations portfolio via Sophos XDR and Sophos MDR offerings, marking an important milestone in its integration journey following the acquisition of Secureworks in February 2025.

Read more...
Cybersecurity operations done right
LanDynamix SMART Security Solutions Technews Publishing Information Security
For smaller companies, the costs associated with acquiring the necessary skills and tools can be very high. So, how can these organisations establish and maintain their security profile amid constant attacks and evolving technology?

Read more...
AI security with AI Cloud Protect
Information Security
AI Cloud Protect is now available for on-premises enterprise deployments to secure AI model development, agentic AI applications, and inference workloads with zero impact on performance.

Read more...
Kaspersky finds security flaws that threaten vehicle safety.
News & Events Information Security Transport (Industry)
At its Security Analyst Summit 2025, Kaspersky presented the results of a security audit that exposed a significant security flaw enabling unauthorised access to all connected vehicles of one automotive manufacturer.

Read more...
The overlooked risks of everyday connectivity
Information Security
That free Wi-Fi you are using could end up costing you a lot more money than your hotspot data if it has been compromised, says Richard Frost, head of technology solutions and consulting at Armata Cyber Security.

Read more...
Syndicates exploit insider vulnerabilities in SA
Information Security Security Services & Risk Management
Today’s cyber criminals do not just exploit vulnerabilities in your systems; they exploit your people, turning trusted team members into unwitting accomplices or deliberate collaborators in their schemes.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.