What keeps you up at night

Issue 9 2020 Editor's Choice

As is often said, Africa is not a country, and few things bring this fact home more than KnowBe4's African edition of its annual What Keeps You up at Night Report. The 2020 edition, now available, conducted surveys in 18 African countries, asking more than 500 organisations about their concerns across a variety of security topics.

Additionally, the report provides specific survey details on the three sub-Saharan giants: Kenya, Nigeria and South Africa. These snapshots are surprising in their variations as well as overlaps. What concerns one of the economic powerhouses is not necessarily a priority for the others, and it's an eye-opener around Africa's diverse security challenges.

"It's a known fact that African countries and organisations are being targeted more actively by cybercriminals, to the level that it's one of the fastest-growing regions in terms of cybercrime," said Anna Collard, senior vice president of content strategy and evangelist, KnowBe4 Africa. "But when you get down to the specifics, the differences between the survey's continental averages and its three biggest sub-Saharan economies are quite striking."

The three respective appendices of the report make for captivating reading. Spread across six main categories – cyber threats, compliance security, security initiatives, users, resources and executive issues – here is a snapshot for each country:

Kenya: In general, Kenya is split on the priorities of security threats such as phishing and ransomware. On average, at least half of organisations don't regard these and other threats as more than somewhat concerning – considerably lower than the continental totals. But that also means that the other half of the organisations rank such threats as very concerning, with 31% saying they are kept awake at night by the possibility of business email compromise.

Kenya's concerns over security initiatives mirror the continent's worries: 46% are kept awake at night about security awareness training and supply chain security. In contrast, the country is not as concerned about different user security issues. African averages lean more towards extreme concerns, yet Kenya's focus tends to split between somewhat and very concerned.

Nigeria: Nigeria is the clear outlier in security matters, taking some very different views on what to be concerned about. On the one hand, no country is more worried about ransomware: 59% of Nigerian companies say this keeps them up at night, though 40% are only somewhat concerned. Malware attracts a similar split. Yet 74% of Nigerian companies are only somewhat concerned about data breaches.

They are not worried much about security initiatives. Only multi-factor authentication truly keeps them awake at night (74%), while the next massive concern, identity management, sits at 27%. Here's the kicker: 89% of organisations there are not at all concerned about security awareness training. When user risks do surface, two types of users solicit similar levels of security concerns – remote workers (67%) and negligent workers (41%). 87% of Nigerian companies are somewhat concerned about malicious insiders, and 69% about password sharing.

South Africa: Attitudes in South Africa align closely with the continent's averages, though there are some differences. While other countries tend to worry most about ransomware, South African organisations rank phishing as extremely (46%) and very (35%) concerning. Malware and business email compromise reflect similar levels of worry and though ransomware is lower than these categories, at 50% it's the threat keeping most businesses awake at night.

South African views around security initiatives almost mirror those of Kenya: 46% are extremely concerned about security awareness training and supply chain security. 38% are also being kept awake by privileged access management, incident response, securing the cloud and multi-factor authentication. Remote workers keep 57% of South African companies up at night, while negligent insiders (44%) and users sharing passwords (41%) are not far behind.

Download the report at https://info.knowbe4.com/what-keeps-you-up-at-night-report-af




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

AI-enabled tools reducing time to value and enhancing application security
Editor's Choice
Next-generation AI tools are adding new layers of intelligent testing, audit, security, and assurance to the application development lifecycle, reducing risk, and improving time to value while augmenting the overall security posture.

Read more...
2024 State of Security Report
Editor's Choice
Mobile IDs, MFA and sustainability emerge as top trends in HID Global’s 2024 State of Security Report, with artificial intelligence appearing in the conversation for the first time.

Read more...
Cyberthreats facing SMBs
Editor's Choice
Data and credential theft malware were the top two threats against SMBs in 2023, accounting for nearly 50% of all malware targeting this market segment. Ransomware is still the biggest threat.

Read more...
Are we our own worst enemy?
Editor's Choice
Sonja de Klerk believes the day-to-day issues we face can serve as opportunities for personal growth and empowerment, enabling us to contribute to creating a better and safer environment for ourselves and South Africa.

Read more...
How to spot a cyberattack if you are not a security pro
Editor's Choice
Cybersecurity awareness is straightforward if you know what to look for; vigilance and knowledge are our most potent weapons and the good news is that anyone can grasp the basics and spot suspicious activities.

Read more...
Protecting IP and secret data in the age of AI
Editor's Choice
The promise of artificial intelligence (AI) is a source of near-continuous hype for South Africans. However, for enterprises implementing AI solutions, there are some important considerations regarding their intellectual property (IP) and secret data.

Read more...
Super election year increases risks of political violence
Editor's Choice
Widening polarisation is expected in many elections, with terrorism, civil unrest, and environmental activism risks intensifying in a volatile geopolitical environment. Multinational businesses show an increasing interest in political violence insurance coverage in mitigation.

Read more...
Enhance control rooms with surveillance and intelligence
Leaderware Editor's Choice Surveillance Mining (Industry)
Dr Craig Donald advocates the use of intelligence and smart surveillance to assist control rooms in dealing with the challenges of the size and dispersed nature common in all mining environments.

Read more...
A long career in mining security
Technews Publishing Editor's Choice Security Services & Risk Management Mining (Industry)
Nash Lutchman recently retired from a security and law enforcement career, initially as a police officer, and for the past 16 years as a leader of risk and security operations in the mining industry.

Read more...
A constant armed struggle
Technews Publishing XtraVision Editor's Choice Integrated Solutions Mining (Industry) IoT & Automation
SMART Security Solutions asked a few people involved in servicing mines to join us for a virtual round table and give us their insights into mine security today. A podcast of the discussion will be released shortly-stay tuned.

Read more...