CyberSecurity News

A recent survey conducted by the multinational technology company Cisco has revealed that South African businesses lack adequate preparation for cyberattacks. According to the index, only 5% of South African companies have attained a mature level of readiness against cybersecurity threats.

Despite this significant lack of readiness, 73% of companies surveyed in South Africa anticipate that a cybersecurity incident will disrupt their business within the next 12 to 24 months.

Cisco evaluates cybersecurity readiness based on five key pillars: identity intelligence, network resilience, machine trustworthiness, cloud reinforcement, and artificial intelligence (AI) fortification.

Companies are categorized into four stages of cybersecurity readiness based on their performance across these pillars: beginner, formative, progressive, and mature.

South Africa's Performance Across the Five Pillars

Identity intelligence readiness evaluates an organization's ability to manage and utilize identity-related data and insights within its network and cybersecurity operations.

In South Africa, 7% of organizations have achieved a mature readiness level, while 17% fall into the progressive category. The remaining 76% are classified as either formative or beginner.

The growing need to access data remotely and in diverse formats has resulted in an increase in the number of devices utilized by employees. Each connected device represents a potential entry point for malicious actors to exploit. Consequently, organizations must protect every device connected to the network or organization, encompassing the concept of machine trustworthiness readiness. In South Africa, 9% of organizations have reached a mature readiness level, 20% are at a progressive stage, and the remaining 71% fall into the formative and beginner categories.

Regarding network resilience readiness, 10% of South African organizations have achieved a mature level, 32% are at a progressive level, 46% are at a formative level, and 12% are at a beginner level.

As more organizations transition their operations to the cloud, the demand for enhanced cloud security increases. The survey indicates that only 6% of South African organizations have attained a mature stage of cloud reinforcement readiness, while 17% are at a progressive stage, 50% are at a formative level, and 27% fall into the beginner level of readiness.

The rapid expansion of generative AI is presenting various opportunities for organizations, including cybersecurity solutions. However, malicious actors are also exploiting AI to cause disruption among unprepared targets. Integrating AI into cybersecurity defenses has become essential.

In terms of AI fortification readiness, 9% of South African organizations have achieved a mature level of readiness, 57% are at a progressive stage, 32% are at a formative stage, and only 2% are at a beginner level. This distribution signals a positive advancement in AI readiness for cybersecurity.

Contrary to the data, 31% of companies express confidence in their ability to maintain resilience amid the evolving cybersecurity landscape, suggesting a potential discrepancy in their assessment of threats and their capacity to handle them.

At StormWarning!, we caution against the danger of overreliance on merely having a competent IT department, as this alone is insufficient for effective cybersecurity. It is imperative for organizations to develop a comprehensive, organization-wide cybersecurity strategy that includes supply chain risk management, delineation of roles, responsibilities, and authorities, as well as policies and oversight of the cybersecurity strategy.

Before implementing any strategy, it is essential to assess your organization's current cybersecurity risks and ensure they are understood by all stakeholders. A comprehensive understanding of the organization’s assets, data, hardware, software, systems, facilities, services, personnel, and suppliers, along with the associated cybersecurity risks, allows for prioritization of cybersecurity preparedness efforts.

Once assets and risks have been identified and prioritized, measures must be taken to secure these assets in order to prevent or mitigate the likelihood and impact of adverse cybersecurity events. This involves the following:

• Identity Management, Authentication, and Access Control: Strengthening identity management and access control across all levels of the organization.

• Cybersecurity Awareness and Training: Providing cybersecurity education and training for all employees, not just the IT department.

• Enhanced Data Security and Platform Security: Securing data, hardware, software, and services across physical and virtual platforms.

Furthermore, implementing early detection systems for cybersecurity attacks is crucial for timely discovery and analysis of anomalies, indicators of compromise, and other potentially adverse events.

Organizations should also establish policies and strategies to contain the impact of cybersecurity incidents. Your organisation will also require policies and systems that facilitate the restoration of normal operations and effective communication during recovery efforts to minimize the impact of cybersecurity incidents.

Keep in mind these attacks are inevetable and no matter how prepared you might think you are Cyber-Criminals are coming up with thousands of new strategies every day so it is imperitive to continually reevaluate the  preparedness of your organisation on an ongoing bases.