Creating a cybersecurity strategy in a world where threats never sleep

January 2024 Information Security, Infrastructure


Kabelo Makwane.

[Sponsored Content] In the last four years, we have seen a broad cultural shift when it comes to the way businesses operate in relation to technology. This shift has made way for more agile and intelligent business outcomes, but growing adoption speeds and moves towards digitalisation are far from new phenomena.

In 2013, an article posted by the Harvard Business Review commented on how technology adoption rates had increased, comparing the adoption of tablet technology with innovations like electricity and telephones. Ten years later, the rate of adoption of technology is incomparable. The rate of adoption of technologies like AI has skyrocketed to a point where 50% to 60% of all organisations use AI in some form. Even more impressively, cloud adoption among enterprise organisations, which is above 90%, and accounts for 75% of the workload in one out of five organisations.

The dialogue around these achievements in technological adoption has changed. In 2013, businesses were aiming to achieve the status of being ‘technologically enabled’, a catchphrase still used today, but simply having the technology is no longer enough. This is due to one simple yet sinister development – cybercrime. While the adoption of AI has helped improve the agility and efficiency of above-board businesses, so too has it helped improve the efficacy of cybercriminals.

Although not a new problem, cybercrime has risen alarmingly quickly to the top of the charts when it comes to business concerns. The boom of Internet of Things (IoT) technology and the chaos that surrounded the sudden shift to work-from-home models in 2020 kick-started the age of cybercrime. In that period, incidents rose by 600%, affecting every industry and showing no signs of slowing down. One report predicts the cost of cybercrime will continue to rise to $10.5 trillion dollars by 2025, up nearly 117% from $3 trillion in 2015. Today, organisations need to be more than just technologically enabled, they need to be future secure.

The biggest difference between being technologically enabled and future secure is the incorporation of the human aspect of cybersecurity. A staggering 88% of data breaches are the direct result of human error. This is compounded by poor training, with 42% of organisations listing a failure in their employee security training as one of their top three challenges. Changes in employee expectations, which have seen flexibility rise to the top of employee demands, undoubtedly play a role in this. In a recent Standford study, 50% of respondents claimed to be “very” sure they had made an error at work that could have led to security issues. Nearly 45% cite distractions as the top reason for these errors, and 57% admitted being more distracted when working from home.

As a result, organisations can no longer take the approach that cybersecurity is the responsibility of just the Chief Technology Officer and their team. Rather, a basement-to-boardroom approach to cybersecurity, which incorporates effective training, is the key to ensuring the security of your organisation.

This comprehensive approach is becoming even more important. Voice and video mimicking have recently gained popularity among malicious groups. While early AI allowed criminals to produce impressively tailored written phishing emails and text messages, this more recent advancement has even led executives to believe they are having a conversation with someone from within their organisation.

So how do organisations become future secure and ensure they are equipped to meet these changing challenges? Although a ‘human firewall’ is arguably the most important factor, organisations must be able to match the malicious groups pound for pound in terms of technology as well as use this technology in a way that serves their purpose. This is where the concept of a cybersecurity footprint is important.

Similar to a digital footprint, a cybersecurity footprint specifically refers to the information related to an individual or organisation's cybersecurity measures, practices, vulnerabilities, and defences in the digital realm. Incorporating everything from firewall configurations to encryption methods, access controls and incident response plans, a cybersecurity footprint encompasses the security protocols, software, hardware, policies, and practices in place to protect digital assets and sensitive information. It is crucial that this be analysed on a regular basis to address any vulnerabilities that may have developed and to understand the adequacy of your current measures.

Simply having this technology in place is not sufficient. Technology cannot exist in a void when it comes to cybersecurity; neither can people. It is critical that organisations implement robust and regular training programmes to keep employees up to speed on the latest threats, policies, and procedures. There is a critical need to improve the attitudes and skills of all employees around cybersecurity for any strategy to be truly effective.

To help businesses achieve this and reduce the prominence of failed cybersecurity training, Vodacom Business is asking organisations of all sizes to ‘Turn to Us’ to protect their data and equip their employees, from the basement to the boardroom, with the skills they need.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

SMARTpod talks to Sophos and Phishield
SMART Security Solutions Technews Publishing Sophos Videos Information Security News & Events
SMARTpod recently spoke with Pieter Nel, Sales Director for SADC at Sophos, and Sarel Lamprecht, MD at Phishield, about ransomware and their new cyber insurance partnership.

Read more...
Cybersecurity and insurance partnership for sub-Saharan Africa
Sophos News & Events Information Security Security Services & Risk Management
Sophos and Phishield Announce first-of-its-kind cybersecurity and insurance partnership for sub-Saharan Africa. The SMARTpod podcast, discussing the deal and the state of ransomware in South Africa and globally, is now also available.

Read more...
Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Corporate and academic teams can register for Kaspersky contest
Kaspersky News & Events Information Security
Kaspersky has announced the registration opening for its new Kaspersky{CTF} (Capture the Flag) competition, inviting academic and corporate teams from around the globe to compete in a battle of skill, strategy and innovation.

Read more...
MDR: What you’re really paying for
Information Security
When businesses invest in managed detection and response (MDR), they’re buying more than a product, they’re securing access to an entire ecosystem of human expertise, global threat intelligence, and 24x7 incident response.

Read more...
Continuous security optimisation.
News & Events Information Security
Cymulate has announced its partnership with SentinelOne, a threat exposure validation and AI-powered cybersecurity platform. The collaboration delivers self-healing endpoint security that empowers businesses to increase protection for every endpoint on their network.

Read more...
Protect your smart home devices
Kaspersky IoT & Automation Information Security Smart Home Automation
Voice assistants, kitchen robots, smart lights and many other intelligent devices have become part of our everyday life. However, with the rise of smart technology comes the need for robust protection against potential vulnerabilities.

Read more...
ISPA’s take-down process protects from local scams
News & Events Information Security
During the recent school holidays, parents could rest a little easier knowing that ISPA, SA’s official internet industry representative body, is removing an average of three to four problematic websites from the local internet every week.

Read more...
NEC XON disrupts sophisticated cyberattack
Information Security
NEC XON recently showcased its advanced cyberthreat detection and response capabilities by successfully thwarting a human-operated ransomware attack targeting a major service provider.

Read more...
What’s your cyber game plan?
Information Security
“Medium-sized businesses are often the easiest target for cyber criminals, because they are just digital enough to be vulnerable, but not mature enough to be fully protected," says Warren Bonheim, MD of Zinia.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.