Cybersecurity in Africa: Securing businesses with a internal proceed with tellurian standards

Cyberattacks on businesses around a universe are on a rise, and Africa is not spared. These attacks cost businesses productivity, revenue, and customer trust—not to discuss a personal confidence of a patrons. For example, a 2017 Equifax information crack might have impacted 147.9 million consumers. The Wannacry ransomware conflict of May 2017 has strike 150 countries, including many African ones. As this trend is on a rise, companies contingency arise a extensive proceed to strengthen their informational resources and strengthen cybersecurity in sequence to be prepared to understanding with these cyber risks. In sequence secure their digital transformation, companies doing business in Africa should prioritize these 4 pivotal initiatives: implementing their cyber resilience strategies, building cybersecurity skills, safeguarding information integrity, and integrating cyber risk insurance in their decisionmaking routine via all levels of management.

Figure 1. Key cybersecurity initiatives for African businesses


Design and muster cyber resilience

Companies contingency prepared for cyberattacks and get cyber volatile since a hazard is ever-present and ever growing. Cyber resilience should start during a house or executive turn of a association by prioritizing and enacting procedures that will strengthen profitable resources and by integrating them as mandate into all business processes. Security should minister to a enterprise’s expansion embodied in a long-term strategy. Moreover, a association should build a cyber capabilities by lifting recognition of and building employees’ skills in information security, securing a configurations and frequently updating a infrastructure and systems, regulating technologies for active surveillance, implementing active showing and fast response to confidence breaches and incidents, and behaving unchanging confidence audits and invasion testing.


Landry Signé's Photo

Creating resilience goes over constructing walls to attackers; it also involves environment adult dedicated processes for a government of cyber crises within a company, and partnership during sectoral, national, and general turn for an sell of information and knowledge on cyber threats. Certification processes, like ISO/IEC 27001, expelled by a International Standard Organization (ISO), are useful resources for businesses seeking a baseline to residence cybersecurity from a government complement perspective.

Some African organizations are holding cyber threats seriously; ISO has reported an boost of 73 percent of Information Security Management System approved companies within a year, from 129 in 2015 to 224 in 2016, with a infancy in South Africa, Nigeria, and Morocco. Despite this poignant growth, a series of companies unprotected stays abundant: For example, usually 15 percent of Kenyan businesses have a complement prepared to “detect intruders.”

Develop cybersecurity skills

Experienced and competent profiles in terms of cybersecurity and risk government are essential to support cybersecurity, though are singular on a continent. Companies contingency now arise skills-building and influence strategies to attract and say gifted professionals to assistance exercise their cyber resilience. This will be a sold plea for businesses over Africa, as a need for information confidence and cybersecurity specialists is on a arise around a globe. In fact, by 2020, confidence ability government programs that embody initial recruitment and talent influence practices will arise to 20 percent, adult from reduction than 1 percent in 2017.  African organizations contingency adopt effective strategies to face a mind empty of their many gifted cybersecurity profiles. Indeed, as they benefit a indispensably skills, those specialists turn increasingly mobile and might select to relocate, generally to Europe and North America.

Protect information integrity

The pattern of information firmness could succeed confidentiality as a primary idea of cybersecurity. The resurgence of attacks, like a many cases of ransomware in 2017 directed during utilizing or destroying data, has highlighted a significance of information integrity, and a impact of breached information on organizations and citizens. Companies contingency strengthen their measures to forestall and redeem from an occurrence of large information corruption. For this purpose, required means such as backups and unchanging replacement of vicious systems are vicious steps. In addition, innovative technologies such as blockchain could be useful to strengthen information integrity, if companies can lessen a antithetic risks, as a record is not mature yet. However, some African companies—especially in North Africa—are already investing in new technologies to residence confidence threats. In fact, Middle East and North Africa information confidence spending grew 11 percent to strech $1.8 billion in 2017.

Integrate cyber risks recognition into a preference process

The best proceed to engage tip government in a quarrel opposite cybercrime is to send a risks to all a levels of a decisionmaking system. This routine involves aligning cybersecurity objectives with a company’s vital ambitions and defining a essential systems and resources that should consecrate a priority range to protect. The objectives so tangible can be reasonably budgeted and damaged down during a tactical and operational levels in sequence to popularize cyber risk-aware enlightenment (increase recognition on a significance of preventing and elucidate cyber risks) during all levels of a company.

Figure 2. Integrating cybersecurity into a wider decisionmaking process


To grasp this, a house and executive government should be some-more wakeful of their burden in box of a cyberattack and commend a need for learned managers to brand and act opposite intensity cyber threats. Unfortunately, a ISACA State of cybersecurity 2017 [1] reports that globally, usually 21 percent of arch information confidence officers (CISO) news to a arch executive officer (CEO) or a board, while 63 percent news by a arch information officer (CIO). This latter stating structure, that is even some-more common in Africa, positions confidence as a technical emanate rather than a business concern, shortening a range of movement and efficacy of any cybersecurity initiatives.


How prepared are businesses for a cyberattack? Each association contingency ask a doubt and prioritize a insurance of their many profitable informational resources by adopting a best cybersecurity practices with a cyber risks-based approach. According to a stream cyber-threat landscape, a priority actions suggested above are a starting line that companies, generally those doing business in Africa, can cruise and exercise in their possess context. Not doing it will not usually put their possess profitability and presence during risk, though also impact a rights of their clients (especially in terms of remoteness and temperament protection). These actions are even some-more obligatory for organizations concerned in vicious infrastructure insurance (in sectors like health, H2O and energy, financial services, communications, governments, food, transportation, usually to name a few) as it might boost their cyber bearing and put an whole nation during risk. They will have no excuse!

[1] Note: Only 2 percent of respondents were in Africa.

Leave a Reply

Your email address will not be published. Required fields are marked *


You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Widgetized Section

Go to Admin » appearance » Widgets » and move a widget into Advertise Widget Zone