Connect with us

E-Business

Taking Enterprise Security to the Board

Published

on

Anton Jacobsz, managing director at Networks Unlimited
Kindly share this post

It’s that time of year, again, with many companies busying themselves in the art of budgeting and forecasting for 2018.

 

In some companies, this means the Chief Information Security Officer (CISO) having to communicate the importance of including enterprise security in this planning, using a language that the members of the board will understand.

 

“For some, this will mean being given a short amount of time to make sure a group of non-technical people understand the company’s business risks and believe that your plan to mitigate them is comprehensive, necessary and worthy of investment,” said Anton Jacobsz, managing director at Networks Unlimited.

 

“The keyword here is ‘business’ – we have got to translate our on-the-ground security concerns into business terms, risks and outcomes. We’re all very good at listing statistics but the ability to translate this into business outcomes, which is the language your board understands, is what will win the day.

 

“Your board’s time, attention span and ability to consume ‘geek speak’ is limited, but there are steps you can take to ensure the time you spend with them matters,” Jacobsz explained.

 

Time for a few home truths

Is your exco one of the many that thinks their organisation is not going to be of interest to cyber criminals? If yes, then it may be time to explain clearly that every single organisation, regardless of size or business focus, is likely to  experience a cyber security breach at one point or another. The reason for this is data.

 

If your business processes payments of any kind, for example salaries or online payments, or if you transmit or store records, or if you’re developing a cure for a dread disease like cancer, then you have information that a hacker can sell.

 

Ryan Kearney, Executive Vice President of Product Development and Chief Technology Officer of F5 Networks, advised that telling a compelling story about a security breach, preferably in your industry or locale, will help board members understand the risks here.

 

“Give examples from your own company. Identify critical information assets – intellectual property, sensitive customer data – and paint a picture of what would happen and what it would cost if they were compromised,” he said.

 

Use statistics to convince, not just frighten

There are ways to move the statistics conversation from one that leaves exco with a feeling of dread to one where they truly understanding the real potential impact to the enterprise.

 

F5’s Kearney says the following types of statistics could be used to educate and surprise board members:

 

  • 73 percent of companies suffered at least one security breach in the past year.

 

  • About a third of employees targeted for phishing will open fraudulent e-mails.

 

  • More than one in 10 take the bait – and it only takes one.

 

  • Less than two minutes can elapse from the hacker hitting send to your systems being compromised.

 

  • Hackers are inside your organisation, on average, for at least four months before they’re discovered.

 

  • Web apps are the number one entry point for breaches.

 

“As the C-suite leader in charge of cyber defence, it is up to the CISO to explain the impact of this to the board,” says Jacobsz. “This is the point where you should be talking in terms of tangible and intangible losses, which are sure to resonate with them.”

 

Tangible costs as a result of security breaches include fines as a result of breaks in customer SLAs, revenue losses due to downtime, compliance/audit fines, potential legal fees and incident response costs, which incorporate unplanned costs for hiring third party breach experts.

 

Less immediately obvious damage could include issues like the impact a breach could have on your company’s brand; existing and potential customer perception/loss; the loss of your competitive advantage and even the potential for the board’s personal reputation being affected.

 

Introduce security awareness to the company culture

If you talk of such things around the braai, you might have heard somebody complaining about how their company doesn’t allow Dropbox or Wetransfers – how archaic, right? Wrong, said Jacobsz.

 

“These policies are enforced because someone, somewhere along the lines, opened a mail, clicked on a Dropbox link and downloaded a file from an unknown, untrusted source resulting in a cyber security breach. But this can be avoided. A secure business is one where everyone is educated about threats and does their part to reduce risk.”

 

F5’s Kearney agreed, saying it starts with rigorous and repeated training and continues with individual buy in.

 

Furthermore, as a key participant in creating the company culture at the outset, the board members themselves must also be challenged to champion efforts that have no received budget approval, he said.

 

“You have done your homework and secured funds for some of your efforts but if you have risk areas that need addressing but have no budget allocation, board members need to know this and either accept the risk or champion a solution. There’s no better way to get something accomplished than by saying the board requested it get done.”

 

Discuss incident response and cyber insurance

 

As mentioned earlier, the likelihood of organisations remaining untouched by security breaches is minimal. Being prepared is the best line of defence, and employing the services of a good incident response firm is the first step.

 

The second is considering options in cyber insurance, which is the fastest growing insurance in the world and is projected to grow by 300 percent from $2.5 billion today in annual premiums by 2020. Here, show your work and do the maths for your board – calculate how much your business can absorb and insure the rest.

 

“Use your board-facing time wisely,” said Jacobsz.

 

“Make sure you prioritise and focus on the top cyber risks bringing solutions to the table. Above all, demonstrate your burning issues in small, easy to digest chunks. Do this and you and your boards will soon be singing in harmony and protecting the company at the same time.”

 

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Study Reveals 83% of Employees Stay Connected to Work During Time Off, Fuelling Digital Anxiety

Published

on

Kindly share this post

A new Kaspersky survey undertaken in the Middle East, Turkiye and Africa (META) region reveals that digital anxiety is becoming a defining feature of modern work culture, as employees don’t disconnect even during their free time and vacations.

According to the findings, 83% of respondents keep an eye on work tasks outside working hours. An overwhelming 85% reply to all work-related messages in instant messaging apps, while the same share (85%) check work emails during their time off – and 81% admit they are responding to work emails while on vacation or in their personal time.

The pressure to remain constantly available is contributing to heightened stress levels in the workplace. Other sources of stress include work issues, for example, 43% experience anxiety after accidentally sending a random message to a work chat.

Interestingly, not all digital mishaps are perceived equally: 40% report that they take it calmly when they send an unfinished email, proving that some mistakes are considered less damaging than others.

Blurred boundaries between professional and personal life, combined with instant communication tools, are intensifying feelings of constant monitoring and fear of making digital errors.

More than a third (36%) of respondents say they feel extremely uncomfortable or even scared if their boss notices them scrolling through social media at work instead of working. The “always-on” culture may undermine employee well-being, increase burnout risks, and reduce overall productivity in the long term.

“Digital anxiety doesn’t just affect employee well-being – it can also increase cybersecurity risks for organisations. When people feel constant pressure to respond immediately to messages and emails, they are more likely to act impulsively, without carefully verifying links, attachments, or sender identities.

This urgency can make employees more vulnerable to phishing, and other scams using social engineering techniques,” comments Brandon Muller, Technical Expert at Kaspersky.

Kaspersky recommends employees to follow the below tips to avoid digital anxiety and associated cyber risks:

  • Slow down before clicking or replying. Digital anxiety can trigger automatic reactions. A short pause to check sender details, URLs, or attachments can prevent security breaches.
  • Treat urgency as a red flag. Cybercriminals often exploit pressure and fear. Always verify unexpected or urgent requests before responding.
  • Avoid handling sensitive information on unsecured networks. Public Wi-Fi, often used when working outside regular hours, increases exposure to cyber threats. Mobile network and VPN should be applied in such cases.
  • Use technologies that will help reduce risks. For example, Kaspersky Premium offers AI-powered anti-phishing features designed to help warn of potential threats.

Businesses can reduce cybersecurity risks related to employees’ digital anxiety by providing regular cybersecurity training that helps staff recognise threats and respond correctly even under stress.

At the same time, organisations should use robust cybersecurity solutions to minimise the impact of human error. Kaspersky Next’s adaptable and robust cloud-native protection, underpinned by an unequalled cybersecurity track record, is one of such products.

Protection solutions for mail servers, such as Kaspersky Security for Mail Server, with anti-phishing capabilities, help to additionally decrease the chance of infection through a phishing email.


Kindly share this post
Continue Reading

E-Business

FG Approves Electric Buses for Civil Servants, Pushes Local Auto Growth

Published

on

Kindly share this post

Federal Government of Nigeria has approved the acquisition of electric buses for civil servants as part of efforts to promote cleaner transportation and boost local vehicle manufacturing.

FG Approves Electric Buses for Civil Servants, Pushes Local Auto Growth

The development was disclosed in Abuja by Joseph Osanipin, Director-General of the National Automotive Design and Development Council (NADDC). Osanipin said the buses would be sourced from local assemblers to strengthen domestic production and stimulate growth in Nigeria’s automotive sector.

He stated: “The initiative is aimed at encouraging the transition to cleaner mobility while creating opportunities for local manufacturers.” According to him, the government has also procured charging infrastructure that will be deployed across parts of the country to support the adoption of electric vehicles.

As part of broader efforts to develop the sector, the council is establishing the Nnewi Automotive Development Park in Anambra State. Osanipin explained: “We are developing the Nnewi Automotive Development Park where we will provide the necessary infrastructure so that users of the park can share facilities.”

He added that the shared infrastructure model would enable investors and manufacturers to operate without bearing the full cost of setting up independent facilities. The council is also seeking additional investment to accelerate the development of the park and attract more industry participants.

Osanipin urged Nigerians to support locally assembled vehicles, noting that increased patronage would help create jobs and drive economic growth. He said the council is providing training to manufacturers and stakeholders to enhance local production of vehicle components such as batteries and tyres.

“The move will reduce import dependence, create employment opportunities, and contribute to the country’s Gross Domestic Product,” he said. The NADDC is also working with the Bank of Industry Nigeria to facilitate the disbursement of the National Automotive Development Fund to qualified stakeholders.


Kindly share this post
Continue Reading

E-Business

Jumia Reaffirms Commitment to Consumer Trust on World Consumer Rights Day

Published

on

Kindly share this post

As the global community commemorates World Consumer Rights Day, Jumia Nigeria joined industry leaders, regulators, and consumer advocates at the Lagos Marriott Hotel, Ikeja, for a high-level panel session hosted by the Lagos State Consumer Protection Agency (LASCOPA) on Tuesday, March 17, 2026.

Speaking during the session, Peters Afebuame, Group Head of Content and Production at Jumia, highlighted Jumia’s comprehensive approach to protecting consumers from counterfeit or adulterated products on its marketplace, noting that the company has implemented structured checks and technology-driven systems across the entire product lifecycle, from seller onboarding to post-listing monitoring, to safeguard product authenticity.

“Ensuring product authenticity on our platform requires a combination of technology, policy enforcement, and continuous seller engagement,” he stated.

“At Jumia Nigeria, we have implemented a multi-layered process that begins with rigorous seller onboarding and policy agreements, followed by catalogue configuration controls, AI-driven product attribute verification, and the use of global product identification standards. These systems are reinforced by ongoing quality moderation, brand protection mechanisms, and strict enforcement actions, including product and seller delisting, ensuring that customers can shop on our platform with confidence.”

Central to Jumia’s consumer protection framework is a rigorous seller verification process designed to ensure marketplace integrity. Vendors are required to provide proof of legal and regulatory compliance before gaining access to the platform. This vetting process is reinforced by a strict quality control system that monitors products listed on the platform, backed by a zero-tolerance policy toward counterfeit or substandard goods. Non-compliant sellers face penalties and permanent delisting from the marketplace.

Transparency also remains a core priority in helping customers make informed purchasing decisions. Product listings across the platform feature clear specifications, verified descriptions, and detailed images, enabling shoppers to understand exactly what they are purchasing before completing a transaction.

Recognising that digital literacy plays a critical role in online safety, Jumia continues to invest in consumer education initiatives through instructional “how-to” videos, platform guides, and social media campaigns that equip Nigerian shoppers with practical knowledge to navigate online shopping securely and confidently.

To further strengthen transaction security, Jumia leverages its proprietary payment solution, JumiaPay, which provides a secure and encrypted payment infrastructure designed to protect customer financial data. The company also adheres to internationally recognised data protection standards such as the General Data Protection Regulation (GDPR) and local regulatory frameworks established by the Nigeria Data Protection Commission (NDPC), ensuring responsible handling and protection of user information.

Beyond the point of purchase, Jumia reinforces consumer protection through a customer-centric return and refund policy designed to ensure seamless resolution when issues arise. A dedicated customer service team also provides support through multiple channels, including phone and social media, enabling swift response to consumer inquiries and complaints.

As e-commerce continues to expand across Nigeria, Jumia reaffirmed its commitment to building a marketplace that prioritises fairness, transparency, and consumer safety. Through continuous investment in technology, strong policy enforcement, and ongoing consumer engagement, the company aims to strengthen trust and confidence in Nigeria’s growing digital commerce ecosystem.


Kindly share this post
Continue Reading

Trending