Shaping security solutions

April 2011 Information Security

Samresh Ramjith sheds some light on the changing face of IT security.

Samresh Ramjith
Samresh Ramjith

Operating environments are spiralling outwards to accommodate business demands for mobility, multidevice access from remote locations and real-time, in-sync information. The ability to secure our core asset – our data – and manage how this is accessed and by whom, is a major issue facing IT management today.

Dimension Data’s GM for Technology and Operations, Samresh Ramjith, sheds some light on the changing face of IT security.

Hi-Tech Security Solutions: How has evolving technology affected the IT security environment?

Samresh Ramjith: Many key businesses enabling technologies such as mobility, convergence and cloud computing introduce a completely new set of security risks. As technology evolves to keep pace with demand, security threats are matching this evolution stride for stride. Threats are growing in sophistication and magnitude with even more devastating effects on enterprise.

Advancement is fantastic for productivity. A proliferation of mobile devices such as laptops, notebooks, tablets, PDAs, smartphones and flash drives facilitate an ever-accessible and agile workforce. However, they also provide additional entry points for security threats to creep in; while cloud computing blurs the boundaries between environments and who is responsible for securing them.

These shifting parameters mean that ‘securing the fortress’ is no longer the only concern, and there is a much higher risk of sensitive data and IP leaking from supposedly ‘secure’ environments than ever before.

HSS: How does one achieve equilibrium between security and business enablement?

Samresh Ramjith: It is impossible and impractical to secure an entire environment. Firstly, it is extremely cost prohibitive. Secondly, it is just not conducive to business enablement. The CIO must balance the organisation’s appetite for business optimisation with security’s need to protect.

Technology is just one element of the ideal security strategy. In order to truly unlock its business potential, the right processes need to be in place, as well as have the right people in place with the appropriate insight and skills to bring all the components together.

The key is to identify and secure the right information, and ensure that this is only accessible to relevant individuals. IT security needs to become more integrated into the business itself in terms of creating processes, information flows and access controls that ensure that not only is business-critical data kept safe, but that information required for collaboration and interaction is readily available.

HSS: The weakest link in IT security has always been the human element. Since a business cannot eliminate this altogether, how can it be contained?

Samresh Ramjith: Changes in infrastructure mean internal threats are becoming as much of a concern as perimeter security. Mobile staff, contractors, and unintentional or malicious security breaches are difficult to contain, and the most secure vault in the world is useless if it is left open.

Encryption may provide a good first line of defence. Tighter role-based access management that limits unauthorised and unnecessary access to data will help. Ensuring that security systems are continually monitored, enforced and updated on a regular basis to ensure their efficacy often proves to be an excellent deterrent.

What is most critical is that businesses need to change the way they think about data and create a culture where people understand that data has value. Information of all kinds can be a highly profitable commodity on the black market and as such needs to be protected in the same sense as any physical asset.

HSS: Technology is becoming more strategic in general. What business imperatives are driving IT security specifically?

Samresh Ramjith: Currently, one of the key trends defining the IT space is the transformation of security from ancillary IT function to core business priority. Businesses are beginning to attach real value to the safeguarding of their information and are moving to align security and business objectives.

As governance and compliance becomes more enforceable, they are likewise driving security initiatives. Good corporate governance often works hand in hand with creating the right framework in terms of controls, shifting security into the position of business imperative. Good governance also speaks to the structure and thinking required to ensure that any threats that may be introduced by new emerging technologies are identified and addressed effectively.

The need for compliance has also introduced the concept of attaching measurability as a means of proving that appropriate controls are in place, Technology-centric, tactical actions are giving way to more structured solutions that allow security to be deployed as a KPA, with more metric-based means of tracing and monitoring its success, and in turn, return on investment for the organisation.

For more information contact Dimension Data, +27 (0)11 575 0000, www.dimensiondata.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Cybersecurity a challenge in digitalising OT
Kaspersky Information Security Industrial (Industry)
According to a study by Kaspersky and VDC Research on securing operational technology environments, the primary risks are inadequate security measures, insufficient resources allocated to OT cybersecurity, challenges surrounding regulatory compliance, and the complexities of IT/OT integration.

Read more...
Cybersecurity in South Africa
Information Security
According to the Allianz Risk Barometer 2025, cyber incidents, including ransomware attacks, data breaches and IT outages, are now the top global business risk, marking their fourth year at the top.

Read more...
Are AI agents a game-changer?
Information Security
While AI-powered chatbots have been around for a while, AI agents go beyond simple assistants, functioning as self-learning digital operatives that plan, execute, and adapt in real time. These advancements do not just enhance cybercriminal tactics, they may fundamentally change the battlefield.

Read more...
Disaster recovery vs cyber recovery
Information Security
Disaster recovery centres on restoring IT operations following events like natural disasters, hardware failures or accidents, while cyber recovery is specifically tailored to address intentional cyberthreats such as ransomware and data breaches.

Read more...
Back-up securely and restore in seconds
Betatrac Telematic Solutions Editor's Choice Information Security Infrastructure
Betatrac has a solution that enables companies to back-up up to 8 TB of data onto a device and restore it in 30 seconds in an emergency, called Rapid Access Data Recovery (RADR).

Read more...
The rise of AI-powered cybercrime and defence
Information Security News & Events AI & Data Analytics
Check Point Software Technologies launched its inaugural AI Security Report, offering an in-depth exploration of how cybercriminals are weaponising artificial intelligence (AI), alongside strategic insights defenders need to stay ahead.

Read more...
The deepfake crisis is here and now
Information Security Training & Education
Deepfakes are a growing cybersecurity threat that blur the line between reality and fiction. These AI-generated synthetic media have evolved from technological curiosities to sophisticated weapons of digital deception, costing companies upwards of $600 000 each.

Read more...
What does Agentic AI mean for cybersecurity?
Information Security AI & Data Analytics
AI agents will change how we work by scheduling meetings on our behalf and even managing supply chain items. However, without adequate protection, they become soft targets for criminals.

Read more...
Phishing attacks through SVG image files
Kaspersky News & Events Information Security
Kaspersky has detected a new trend: attackers are distributing phishing emails to individual and corporate users with attachments in SVG (Scalable Vector Graphics) files, a format commonly used for storing images.

Read more...