Connect with us

Uncategorized

Nigeria Cyberspace Neglected, Unprotected Territory- Onifade

Published

on

Kindly share this post

As the use of IT becomes pervasive, government, large corporations and private organizations are daily combating cyber security.
In this encounter with Opeyemi Onifade, president, Information Systems Audit and Control Association [ISACA] Abuja chapter, examine the trend. Excerpts.     

How Big is Cyber Security Threats in Nigeria
Nigeria as a member of the global society and the country cannot be insulated from the opportunities and threats of globalization. Now, the use of IT is pervasive.
Many organizations in Nigeria are leveraging on the Internet to transact and interact with customers, employees, suppliers and partners. The internet has become imperative to address our collective capacity to respond to the inevitability of cyber threats, especially Advanced Persistent Threats [APT].
Primarily, the purpose of the majority of APTs is to extract information from systems—this could be critical research, enterprise intellectual property or government information, among other things.
Talking about the shift in the motive for hacking (i.e. compromising the security profile of information systems), you will find that there is an evolution in the motivation for attacks.
Motivation for attacks can be explained as being attacked because you are on the Internet and you have vulnerabilities. Or because you are on the Internet and you have information of value; or because your former or current employee seeks financial gain from selling your intellectual property (IP) or because of who you are, what you do or the value of your IP.
And these include state-sponsored attacks and corporate espionage. According to recent research, Cybersecurity is a top global concern. 82% of enterprises are expected to experience a cyber incident in 2015.

Businesses and Government Preparing for the Current Threat
Financial industry players like banks have strengthened their cyber resilience through implementation of adequate technology, adoption of process-oriented good practices and standards, and engagement of right skills and competencies.
However, our government needs to consider a special vehicle to establish the framework to address cybersecurity issues strategically, tactically and operationally.
This is because cybesecurity is a security issue, in fact a national security concern.
We need to understand that we cannot succeed by accident. The cyberspace is now recognized as the fifth domain of warfare in addition to land, air, sea and space.
Unfortunately, in Nigeria, our cyberspace domain is still a neglected and unprotected territory.
Yet, we have come to depend so much on mobile telecommunications, electronic banking and e-commerce for our socioeconomic survival.
In specific terms, there is a need for the government to declare an emergency in the cybersecurity education domain of the country in order to promote cyber security expertise and create a formidable “army” that will be able to ensure effective national cyber defense.
The University Commission needs to update curricula development and accredit information security courses in our tertiary institutions.
Standards Organization of Nigeria needs to domesticate the information security related international standards. NITDA needs to wake up to her responsibilities as the governing body for IT-related security issues in the country.
This is an unfamiliar territory to government bureaucracy and the bureaucrats need to have the humility to collaborate with the professional bodies like ISACA with over 2000 credentialed Nigerian members in the interest of security of the country and wellbeing of her citizens.

Where Does ISACA Fit into all of These?
ISACA provides practical guidance, benchmarks and other effective tools for all enterprises that use information systems.
Through its comprehensive guidance and services, ISACA defines the roles of information systems governance, security, audit and assurance professionals worldwide.
The COBIT framework and the CSX, CISA, CISM, CGEIT and CRISC certifications are ISACA brands respected and used by these professionals for the benefit of their enterprises.
Nigerian banks depend on our members to man their audit, risk, e-business, operations and strategy department. CBN guidelines to the banks require them to use ISACA’s framework to align IT with Business strategy.
To become a member, you are required to register as a professional or student member.
Membership gives you access to vast educational opportunities and international networks.
Members are supported to earn professional credentials upon passing relevant exam and demonstrating verifiable work experience.
ISACA operates three chapters in Nigeria- Abuja, Lagos and Ibadan.  There are over 2000 members resident in Nigeria at the last count.

How can ISACA Enable Proven Best Practices to Reduce the Attack Surface, and Mitigate Risks?
For over 40 years, ISACA has promoted trust in, and value from information systems. ISACA has published frameworks and standards related to information assurance, information security, risk management, and corporate governance of IT.
We have been a global thought-leader on these issues.
In 2015, ISACA commenced a skill-based credentialing programme, Cybersecurity nexus CSX to develop and validate cybersecurity competencies. 
This programme is in recognition that the most advanced of cyber attacks are done by people and the defense side needs to have adequate competencies to reduce or eliminate opportunities for successful attacks.
ISACA provides access to the knowledge and competencies for cybersecurity in over 180 countries of the world.
ISACA Abuja chapter will be 10 years this year. What are your plans to commemorate this?  What are the preparations for the up-coming annual conference?
As part of our contribution to promoting the right use of information technology in the country, ISACA Abuja Nigeria has been hosting annual international conferences. The seventh edition coincides with our 10th anniversary.
This conference theme is “CYBERSECURITY: Aligning Nigeria with the rest of the World”. The Chief Information Security Officer of the City of Atlanta,
USA has accepted our invitation to be the keynote speaker. We are also drawing speakers from other parts of the world and from within the country.
As a social responsible professional body, we shall be donating IT-related books to tertiary institutions and libraries in Abuja.
We have also planned a free seminar for students of tertiary institutions interested in cybersecurity profession.
The platform is meant to provide mentorship to future cybersecurity professionals. To commemorate our 10th anniversary, we will be signing MOU with organizations that believe in our cause to make our cyberspace safe across the country and region.

Nigeria Security Professionals and Requisite Training to Build Strong Core Infrastructure, to Combat Digital Security Threats
According to CISCO, there are over one million unfilled jobs for information security roles worldwide. Another research estimates that more than 35% of enterprises are unable to fill open cyber security positions.
I believe security professionals in Nigeria have not been able to gain the recognition they deserve and so they have not been able to express themselves through hands-on contributions to the economy and national security. Sadly, there is currently an incessant loss of our cyber security professionals to opportunities in the Middle-East economies.
The brain drain will continue until we create an atmosphere to retain these skills. It happened to nursing and medical professionals in the 80’s, it is happening again to our cyber security professionals.
I think there are numerous opportunities for self-development for our professionals, but businesses and all tiers of government must begin to look to our citizens for cyber protection in order to fully engage and truncate the brain drain in the cyber security industry.
I wish to suggest that government agencies and businesses should be involved in sponsoring cybersecurity events for professionals and students.
An example is the cyberlympics organized by ISACA International. President Buhari will need to find a means to drive the cybersecurity agenda for the nation.
Recently the US President issued an executive order on cyber security earlier in the year and the UK government recently made public her National Cyber Security Strategy.

Legislation and Fight Against Security Threats and Cybercrime
Thankfully, the cybercrime bill was passed into law this year and there are attempts by the Office of National Security Adviser to promote a national strategic framework for cybersecurity.
While that is a good step forward, we are still very unserious in providing a legal framework for governing our cyberspace.
I mentioned earlier that our cyberspace is a neglected territory. Our laws should attempt to make Nigeria one of the most secure places to do business.
Until recently, Amazon.com would not ship to Nigeria. Paypal would not do business with Nigeria at all. While these organizations have modified their business models for Nigeria, their service package for Nigeria is still limited.
This means that Nigerians are unable to take full advantage of international e-commerce. For instance, while a Nigerian can pay using the global payment platform, paypal, she cannot receive payment using the same platform.
We need laws that will enable e-business not just punish cyber misdemeanor.
We are hoping that the members of the eight National Assembly will be open to working with experts in non-profit organizations like ISACA to help with research and case studies to make our laws appropriate and relevant to 21st century realities.

What can CISO do to Become very Prominent in Organisations?
The role of a CIO is to create value from the information asset of the organization while a CISO’s role is to preserve the value of the organization’s information asset. Information has become the most important factor of production over land, labour and capital.
Therefore, information security is really about business security. The CEO is the one who will be held accountable for the protection of the most important productive asset of the organization, i.e. the information assets.
He can delegate this responsibility to a CISO but he cannot delegate the accountability.  A CISO therefore needs to recognize his role as someone responsible for business resilience and performance. His role is not just to implement controls but also to ingrain the enablers of business strategic outcomes.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

Uncategorized

Defending the foundations for connectivity

Published

on

Kindly share this post

By Engr. Gbenga Adebayo

In 2001, when the first GSM call was made in Nigeria how many of us would have envisaged the digital world that we live in today? The pace of growth and the rate of adoption of telecoms solutions in Nigeria has been revolutionary. It is a globally acknowledged case study that we should be proud of and a clear demonstration of what can be achieved.

Almost all of us today are reliant on the network connectivity that it has enabled in different shapes and forms. From the simple need to communicate with loved ones, to the digital platforms that enable our access to and consumption of entertainment, financial products and other critical services. Our reliance on these systems is becoming more and more acute, whether it is citizens, governments, or corporations. System downtime is increasingly disruptive and offline manual redundancies are often in the advanced stages of being phased out. The pace of this transition is not slowing down. With the core infrastructure in place, innovation is driving the exponential growth of services that ride on it. From the fully adopted social media that has changed the way we interact, to the emerging Artificial Intelligence (AI) revolution.

While this innovation is enabling exciting new possibilities, there is a tendency to focus on those opportunities, to the detriment of the core infrastructure on which it rides. It is imperative that we retain a focus on the optimisation of that infrastructure and enable continued investment in its development. We have seen how the transition from 2G, through to 3G, 4G and 5G have each enabled the development of more and more sophisticated solutions.

The continued development of core infrastructure has to be sustainable, and over the last few months we have begun to see the challenges that the operators that provide it are facing. Both MTN and Airtel have declared significant foreign exchange (FX) losses in Nigeria, and the stress is not linked to them alone. The entire ecosystem is battling with a range of challenges that must be addressed. If we fail to do so, the downstream impact on innovation will be severe. Telecoms infrastructure requires a base level of investment to maintain its current capabilities, and significant additional investment to expand and grow. It is capital intensive and that capital has to be generated through sustainable business models.

At the heart of the challenge the industry faces is the issue of rising costs. Recent financial losses are directly linked to the cost of operating towers that rely on inputs like diesel, which have increased significantly as the Naira has depreciated. The provisions large telecom companies have had to make, and the consequent losses and impact on their reserves is a red flag. It tells us that business as usual is not sustainable. If we continue as we are, then those companies will struggle to continue to invest in and maintain existing services.

But those costs are not the only challenge. General cost inflation, multiple taxation, regular and damaging vandalisation of infrastructure and the costs associated with regulatory compliance all help contribute to the high cost of operations. We cannot continue to follow a path that asks those companies to simply accept those rising costs. It is no longer sustainable, and we have reached an inflection point.

This is a critical moment for the industry. How we approach and resolve it will define the future of Nigeria’s digital economy. If you want to be able to enjoy the benefits that digitisation brings. If we want the infrastructure that enables AI and helps us drive growth, then we must take action now.

Cost-reflective tariffs, like it or not, are simply non-negotiable. We have seen the impact of price controls in other segments of the economy, like power. If providers cannot operate sustainable business models, then they stop investing. When that happens, the existing infrastructure starts to crumble. For power, a consumer can choose to take ownership of the solution by buying a generator, or a solar panel. For fuel, the government can step in as the provider of last resort and manage a subsidy regime that mitigates the impact on the population. Those options are not available in the telecoms sector. There is no self-help solution.

We fully understand and appreciate the financial stress that Nigerians are experiencing today. The cost of living is the single most significant factor in most people’s daily lives. But those people are still able to enjoy the benefits that connectivity brings, at the price they paid before these challenges became so acute. Imagine a future in which the gains of the last twenty years are reversed. Nigeria, and Nigerians simply cannot afford it. The pain that we would feel under those circumstances would be exponentially worse.

We need to find a long-term, sustainable and manageable solution to this problem. Prices will need to rise, but action needs to be taken in a measured way, through sustainable conversations and partnership with the government. It is time to address this head on.

Engr. Gbenga Adebayo is the Chairman, Association of Licensed Telecoms Operators of Nigeria (ALTON)


Kindly share this post
Continue Reading

Uncategorized

.NG Domain is Nigeria’s Pride Online – Akinsanya

Published

on

Kindly share this post

The .ng domain name, Nigeria’s country code top-level domain (ccTLD), is the nation’s critical resource in the digital space, says Adesola Akinsanya, the president of the Nigeria Internet Registration Association (NiRA).

Akintola Owolabi, Professor of Cost and Management Accounting at Lagos Business School (front – third from left; Adesola Akinsanya, the president of the Nigeria Internet Registration Association (NiRA) (Front – fourth from right), flanked by members of EBOD and Management Team of NiRA during a training programme at LBS.

The .ng domain extension is unique to Nigeria, and it can give businesses a strong local identity.

This can help establish trust with customers, which is especially important for businesses that rely on local customers.

Mr. Akinsanya made the comments at NiRA Executive Board of Directors (EBOD) and Management Training held at the Lagos Business School (LBS).

The NiRA Executive Board and Management Training at LBS spanned a series of intensive interactive sessions designed to address critical challenges and opportunities in the digital domain.

The training program emphasized the importance of strategic vision, ethical decision-making, and resilience in the face of digital disruptions.

Participants gained insights into global best practices in digital governance, risk management, and leveraging digital technologies for business growth and societal impact.

Mr. Akinsanya, highlighted the significance of the collaboration with LBS, stating, “The NiRA EBOD/Management Training at LBS underscores our commitment to fostering a robust digital ecosystem in Nigeria. It equips leaders with the expertise to address complex digital challenges especially in accounting and financial management while harnessing the immense opportunities of the digital age.”

The program featured distinguished speakers, industry practitioners, and faculty members from LBS, providing a holistic learning experience enriched with real-world case studies and practical insights.

Participants commended the program for its relevance, depth of content, and interactive learning approach, noting its immediate applicability to their roles and responsibilities.

The NiRA EBOD Training at LBS represents a milestone in advancing digital leadership and governance in Nigeria.

“By equipping leaders with cutting-edge knowledge and strategic insights, the program contributes to building a resilient and innovative digital ecosystem that drives sustainable growth and societal development, especially from NiRA perspective. We must fashion out ways of increasing .NG domain name adoption which is our national pride in the digital space”.

Speaking further on why Nigerians and businesses should adopt the .NG domain name, the NiRA president said, “.NG domain name gives your brand special recognition both on and offline.

“Using a .ng domain name can help your business stand out in the Nigerian and global market. It is a great way to differentiate your brand from competitors and establish a unique identity. A .ng domain name is easier to remember, which can make it more likely that customers will return to your website in the future”, he said.

“It instantly communicates to internet users that your business is located in Nigeria. This can be especially helpful if you operate in a niche or industry where location is important to customers”, the NiRA boss added.

He added that Google and other search engines prioritize local content in search results, hence using a .ng domain name can help improve your website’s search engine ranking for local searches.


Kindly share this post
Continue Reading

Uncategorized

Climate Action Africa Opens Applications for CAAF24 Deal Room

Published

on

Kindly share this post

Climate Action Africa (CAA), a leading advocate for climate resilience and sustainable development, has announced the opening of applications for the Deal Room at the 2024 Climate Action Africa Forum (CAAF24). The Deal Room is a groundbreaking platform that aims to connect high-impact climate innovators in Africa with potential investors seeking to accelerate sustainable solutions.

The CAAF Deal Room is a strategic initiative that aims to create opportunities for innovators in the climate-tech domain focusing on emission reduction, energy, agriculture, transportation, circular economy, and building and construction.

The goal of the Deal Room is to select finalists who will have the opportunity to pitch their innovative ideas and solutions at the upcoming 2024 Climate Action Africa Forum, which will be held on June 19th in Lagos, Nigeria.

The Deal Room aims to boost investments in Africa’s green economy by galvanising a community of innovators, entrepreneurs, and investors to create applicable solutions that can mitigate the challenges of climate change on the African continent.

The Deal Room session will facilitate financing for solutions contributing to the growth and sustainability of Africa’s green economy. These deals may encompass prize money, equity plans, debt financing, mergers and acquisitions, and other investment options.

“Through the CAAF24 Deal Room, we aim to bridge the critical gap between promising climate ventures and the essential resources they need to thrive,” says Grace Oluchi Mbah, Co-founder and Executive Director of Climate Action Africa (CAA). “By facilitating connections between passionate entrepreneurs and dedicated investors, we can collectively unlock the immense potential of climate solutions in Africa.”

The eligibility criteria for applying include:

●     The company must be African-owned and operate in any of the 54 African countries.

●     It must be a for-profit company, between 1-5 years post-incorporation, post-MVP (minimum viable product), and post-GTM (go-to-market).

●     The company should leverage digital technology to deliver its business model.

●     Female ownership is an added advantage.

 Those eligible to apply include venture capitalists, impact investors, climate tech startups, Green SMEs (small and medium-sized enterprises), philanthropic organisations, and government representatives.

Following the CAAF24 deal-room will be a post-event accelerator in partnership with the Silicon Valley-based Founder Institute and IDEA Africa. This Africa-wide initiative is specifically designed to further accelerate and enhance support for promising Climate Tech startups and founders who participated in the Deal Room.

The official unveiling of this accelerator will take place at the Climate Action Africa Forum 2024 (CAAF24), marking a significant step forward in driving Climate Tech innovations throughout Africa.

Applications for the CAAF24 Deal Room are open from April 22nd until May 17th. Interested applicants can register at https://deal.caaf.africa/register.


Kindly share this post
Continue Reading

Trending