Cyber security in South Africa – Source:davinciforensics.co.za

Legislation, Regulations, Challenges

According to SABRIC (South African Banking Risk Information Centre), South Africa now rates as the third highest number of victims of cyber crime in the world. This equates to a loss of nearing R2.2 billion per year to attacks via cyber crime. Due to the larger percentage of corporate headquarters in SA, specifically retail and banking, SA is more attractive to cyber criminals than all other areas of Africa. While there has been a focus on regulations and legislation to combat this problem, it has turned out that it’s a lot more complex than just having laws in place.

Addressing the legislation and regulations to reduce cyber attacks is a first line defense. The Cybercrimes and Cybersecurity Bill adopted by The National Assembly was a first step. While the regulation included up to three years of jail time for South Africans convicted of the offences, it as dictated how organisations must handled customer data.

The bill itself is believed to be too broad, with less detail that aims at cybercriminals.  As we are seeing in many countries, just having legislation isn’t enough; SA must also have the budget to include those that will enforce the laws.

Cyber professionals in SA are also few and far between. While much of the world is in dire need of those with cyber skills, SA is unique in that students that wish to study and have a cyber security career must have a degree or three-year diploma in Computer Science or IT and can only take cyber security specific subjects at the Masters or Honour degree levels. Although there are some online course offered from a few universities, these require previous field knowledge and may not be affordable for all.

As breaches across SA continue to rise, it has to be noted that companies are skittish about reporting them. Even though the DST’s  (Department of Science and Technology) Policy Framework states “shall be responsible for developing and facilitating the implementation of a national cybersecurity research and development agenda for South Africa,” there remains a lack of interest in companies to reveal that they have experienced a breach. Due to more education on the topic, some companies are taking additional steps to ensure that employees are made aware of cybersecurity measures to recognise the actions that threat actors take. Cybersecurity specialists are being brought onboard for risk analysis as well as conveying actions staff can take to assist in protecting the business. Some companies are investing in the employees that have talent for technology, ability to strategise, and are good communicators by paying for the online courses.

Dealing with cyber challenges entails more than a single approach, and instead requires a diversified attitude that complies with current and future regulations as well as having the correct cyber professionals educated and trained. Cyber criminals will continue to escalate their own attempts to breach, steal and threaten and both government agencies as well as businesses need to be prepared to maintain the integrity of their systems and networks.

“DaVinci Cybersecurity maintains up-to-the-minute information on every aspect and methods used by hackers. Our team works with companies and staff to educate and maintains speaking engagements to communities and corporations to ensure that cybersecurity continues to be a priority for the general public and businesses.”

– Sharon Knowles, CEO DaVinci Cybersecurity

cybersecurity legislation South Africa

Source:

comms.thisisdefinition.com/insights/the-cyber-security-challenge-in-south-africa