CyberSecurity News

The financial toll of cyber attacks in South Africa is comparable to the damage caused by corruption, according to Dr. Jabu Mtsweni, chief researcher and manager of the Council for Scientific and Industrial Research’s (CSIR) Information and Cyber Security Research Centre.

The Financial Impact of Cyber Attacks in South Africa Compared to Corruption, Says CSIR

Speaking at the presentation of the CSIR’s national cyber security surveys, conducted at the end of the 2023/24 financial year, Mtsweni emphasized that the rise in cyber incidents poses a significant threat to both the economy and social stability.

The surveys, conducted in collaboration with the Cyber Security Hub under the Department of Communication and Digital Technologies, gathered responses from approximately 1,200 participants across ICT, financial, and other sectors. The research explored cyber security preparedness, resilience in the public sector, skills gaps, incident response, and the digital identity landscape in South Africa.

Mtsweni noted that the frequency of cyber security-related incidents has sharply increased over the past decade, as criminals find digital means to profit, eliminating the need for physical robberies.

"South Africa is ill-prepared to address these threats effectively," said Mtsweni. He revealed that 68% of organizations fail to respond promptly to cyber-attacks, and the ongoing skills shortage exacerbates the challenge. Cybersecurity awareness is also lacking, with only 32% of organizations actively training their employees. "Cybersecurity is not a 'set it and forget it' initiative," he warned, adding that the financial and social impact of cyber incidents is now comparable to corruption in the country.

Repeat Victims of Cyber Attacks

In recent years, South African organizations—particularly government entities, healthcare providers, and financial institutions—have frequently fallen victim to cyber attacks and data breaches. This trend prompted South Africa’s Information Regulator to express concern over the escalating rate of data compromises. In the 2023 financial year, the regulator received over 1,700 reported security breaches, more than triple the previous year’s total.

Senior CSIR cyber security specialist Homba Ngejane presented survey findings showing that 88% of respondents experienced a breach, with 90% falling victim to multiple attacks. Only 12% reported remaining untouched by cyber incidents. Common attack types include denial-of-service, ransomware, and wiper attacks, with malware and phishing as the primary threats.

Ngejane noted that third-party connections, phishing, and hardware-based attacks are frequently the root causes. Additionally, once an organization has been breached, it faces an increased likelihood of being targeted again.

The financial impact of these incidents varies, with 4% of respondents reporting losses of up to R1 million due to fines and remediation costs, while others incurred damages of up to R500,000.

Cybersecurity in the Public Sector

The CSIR also surveyed public sector entities, gathering responses from 301 government departments, municipalities, and public institutions. According to Thuli Mkhwanazi, a CSIR cyber security researcher, 47% of public sector organizations reported between one and five cyber incidents in the past year, with malware and phishing attacks posing the greatest challenges.

While 64% of public sector respondents feel prepared to handle cyber security incidents, a small yet significant portion (6%) lack confidence in their response capabilities. Although 89% of respondents have formal incident response plans, only 32% actively train more than 25% of their workforce, leaving room for improvement in cybersecurity awareness.

Recommendations for Strengthening Cybersecurity

The CSIR concluded its findings with several key recommendations to improve South Africa's cybersecurity landscape:

1. Invest in cybersecurity: Increase funding for infrastructure, education, and research.
2. Develop a skilled workforce: Focus on creating a highly skilled cyber workforce through targeted training and educational programs.
3. Strengthen incident response: Enhance the ability to respond quickly and effectively to cyber threats.
4. Improve digital identity: Implement robust solutions to safeguard users’ online identities.
5. Foster public-private partnerships: Encourage collaboration between government and the private sector to address ongoing cyber security challenges.

By addressing these recommendations, South Africa can significantly bolster its cyber defenses and better protect its critical infrastructure.

Enhance Your Cybersecurity with StormWarning! Solutions

In today’s landscape of increasing cyber threats, StormWarning! is here to help organizations stay one step ahead. We specialize in automated NIST CyberSecurity audits, expert cybersecurity consultations, and customized corporate training programs tailored to meet your specific needs. Whether you're facing growing digital risks or looking to build a more resilient workforce, StormWarning! provides the tools and expertise to secure your business and its critical assets. Don't wait for a breach—fortify your defenses with StormWarning! today.