Connect with us

E-Business

Taking Enterprise Security to the Board

Published

on

Anton Jacobsz, managing director at Networks Unlimited
Kindly share this post

It’s that time of year, again, with many companies busying themselves in the art of budgeting and forecasting for 2018.

 

In some companies, this means the Chief Information Security Officer (CISO) having to communicate the importance of including enterprise security in this planning, using a language that the members of the board will understand.

 

“For some, this will mean being given a short amount of time to make sure a group of non-technical people understand the company’s business risks and believe that your plan to mitigate them is comprehensive, necessary and worthy of investment,” said Anton Jacobsz, managing director at Networks Unlimited.

 

“The keyword here is ‘business’ – we have got to translate our on-the-ground security concerns into business terms, risks and outcomes. We’re all very good at listing statistics but the ability to translate this into business outcomes, which is the language your board understands, is what will win the day.

 

“Your board’s time, attention span and ability to consume ‘geek speak’ is limited, but there are steps you can take to ensure the time you spend with them matters,” Jacobsz explained.

 

Time for a few home truths

Is your exco one of the many that thinks their organisation is not going to be of interest to cyber criminals? If yes, then it may be time to explain clearly that every single organisation, regardless of size or business focus, is likely to  experience a cyber security breach at one point or another. The reason for this is data.

 

If your business processes payments of any kind, for example salaries or online payments, or if you transmit or store records, or if you’re developing a cure for a dread disease like cancer, then you have information that a hacker can sell.

 

Ryan Kearney, Executive Vice President of Product Development and Chief Technology Officer of F5 Networks, advised that telling a compelling story about a security breach, preferably in your industry or locale, will help board members understand the risks here.

 

“Give examples from your own company. Identify critical information assets – intellectual property, sensitive customer data – and paint a picture of what would happen and what it would cost if they were compromised,” he said.

 

Use statistics to convince, not just frighten

There are ways to move the statistics conversation from one that leaves exco with a feeling of dread to one where they truly understanding the real potential impact to the enterprise.

 

F5’s Kearney says the following types of statistics could be used to educate and surprise board members:

 

  • 73 percent of companies suffered at least one security breach in the past year.

 

  • About a third of employees targeted for phishing will open fraudulent e-mails.

 

  • More than one in 10 take the bait – and it only takes one.

 

  • Less than two minutes can elapse from the hacker hitting send to your systems being compromised.

 

  • Hackers are inside your organisation, on average, for at least four months before they’re discovered.

 

  • Web apps are the number one entry point for breaches.

 

“As the C-suite leader in charge of cyber defence, it is up to the CISO to explain the impact of this to the board,” says Jacobsz. “This is the point where you should be talking in terms of tangible and intangible losses, which are sure to resonate with them.”

 

Tangible costs as a result of security breaches include fines as a result of breaks in customer SLAs, revenue losses due to downtime, compliance/audit fines, potential legal fees and incident response costs, which incorporate unplanned costs for hiring third party breach experts.

 

Less immediately obvious damage could include issues like the impact a breach could have on your company’s brand; existing and potential customer perception/loss; the loss of your competitive advantage and even the potential for the board’s personal reputation being affected.

 

Introduce security awareness to the company culture

If you talk of such things around the braai, you might have heard somebody complaining about how their company doesn’t allow Dropbox or Wetransfers – how archaic, right? Wrong, said Jacobsz.

 

“These policies are enforced because someone, somewhere along the lines, opened a mail, clicked on a Dropbox link and downloaded a file from an unknown, untrusted source resulting in a cyber security breach. But this can be avoided. A secure business is one where everyone is educated about threats and does their part to reduce risk.”

 

F5’s Kearney agreed, saying it starts with rigorous and repeated training and continues with individual buy in.

 

Furthermore, as a key participant in creating the company culture at the outset, the board members themselves must also be challenged to champion efforts that have no received budget approval, he said.

 

“You have done your homework and secured funds for some of your efforts but if you have risk areas that need addressing but have no budget allocation, board members need to know this and either accept the risk or champion a solution. There’s no better way to get something accomplished than by saying the board requested it get done.”

 

Discuss incident response and cyber insurance

 

As mentioned earlier, the likelihood of organisations remaining untouched by security breaches is minimal. Being prepared is the best line of defence, and employing the services of a good incident response firm is the first step.

 

The second is considering options in cyber insurance, which is the fastest growing insurance in the world and is projected to grow by 300 percent from $2.5 billion today in annual premiums by 2020. Here, show your work and do the maths for your board – calculate how much your business can absorb and insure the rest.

 

“Use your board-facing time wisely,” said Jacobsz.

 

“Make sure you prioritise and focus on the top cyber risks bringing solutions to the table. Above all, demonstrate your burning issues in small, easy to digest chunks. Do this and you and your boards will soon be singing in harmony and protecting the company at the same time.”

 

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Kaspersky Warns that Scammers are Exploiting World Cup 2026 Travellers

Published

on

Kindly share this post

Kaspersky experts explain which online offers travellers should be cautious of when planning their trip, to avoid spoiling their experience ahead of the upcoming games.

Thousands of fans are expected to attend the World Cup 2026, and many are already handling their travel logistics, purchasing their flights and other transport tickets, booking accommodation, and arranging everything they need to reach the host cities. As interest grows, so does the number of fraudulent schemes that exploit the fact that fans are actively preparing for their upcoming journey.

In late April 2026, Kaspersky experts detected a campaign exploiting the branding of a well-known transport app, targeting users in Mexico. The interface of a fake Spanish-language website, impersonating one of the services, prompts users to enter their phone number and password in order to “claim prizes.” In reality, the attackers are mimicking a trusted brand and attempting to steal users’ credentials from those lured by the promise of a reward.

Some cybercriminals go “a level lower” and post their offers on the dark web. Kaspersky Digital Footprint Intelligence experts discovered a thread advertising such services, published on a shadow forum in March 2026.

The listings included offers for discounted airline tickets, hotel bookings, and match tickets, allegedly at 20% off the original price. These offers are designed to lure users and can be highly dangerous, ultimately resulting in victims losing both their money and any services they expected to receive.

Entrepreneurs and property owners also in the crosshairs

Cybercriminals are also targeting businesses and entrepreneurs at the intersection of the travel industry, which is also involved in the event. Given the high demand for short-term rentals during the tournament, property owners have become an attractive target for scams.

For example, a fake website was discovered requesting account credentials for a well-known platform. In this way, scammers attempt to gain access to property owner accounts, potentially resulting in unauthorised withdrawals and financial losses.

Another common scheme involves fraudsters attempting to extract money from organisations by posing as representatives of well-known airlines and offering fictitious business partnerships. In these emails, they claim to be launching new projects or business expansion initiatives and state that they are actively seeking suppliers or contractors.

If a company representative responds to such an offer, the scammers typically escalate the deception in a subsequent stage. To enhance credibility, they send forged documents for completion and signature, including supplier registration forms and non-disclosure agreements.

The ultimate objective of the fraudsters in this scheme is to induce the organisation to pay a so-called “deposit,” ostensibly required to secure a priority position in a partner selection list.

According to the claims made in the fraudulent communications, this payment would later be fully refunded once the partnership is formally established. In reality, this promise is entirely deceptive. The perpetrators simply appropriate the funds, and no reimbursement is ever made to the victim organisation.

“The travel sector, particularly when it intersects with major events, is a persistent target for a wide range of scams and fraudulent schemes. For end users, it is often difficult to distinguish at first sight between a legitimate website and a spoofed one, or between genuine marketing communications from a reputable service and scam emails.

“We therefore advise treating overly attractive offers with a high degree of caution in order to protect your personal data and financial resources,” says Anna Lazaricheva, senior spam analyst at Kaspersky.


Kindly share this post
Continue Reading

E-Business

Meta Platforms Contributed $820m to Nigeria’s Economy in 2025 – Report

Published

on

Kindly share this post

Meta’s family of platforms, including Facebook, Instagram and WhatsApp, contributed an estimated 820 million dollars in annual economic value to Nigeria in 2025, according to a new report released on Wednesday.

Meta platforms contributed $820m to Nigeria’s economy in 2025 - Report

Meta

The report titled “Nigeria’s Digital Economy” was conducted by independent research firm, Public First, and commissioned by Meta.

It stated that 14 million Nigerian small and medium-scale enterprises (SMEs) used Meta platforms in 2025 to start, run and grow their businesses.

According to the report, the platforms contributed about two billion dollars to Nigeria’s Gross Domestic Product (GDP) while generating an estimated 640 million dollars in productivity gains through instant messaging services.

The report noted that 81 per cent of Nigerian businesses surveyed said Meta platforms had helped them expand their customer base beyond their local areas.

It added that the digital tools had reduced customer acquisition costs and enabled businesses in different parts of the country to access wider markets.

The report also highlighted the growing role of artificial intelligence (AI) in Nigeria’s economy, projecting that AI could contribute 22 billion dollars to the country’s GDP by 2035 under favourable conditions.

It stated that 87 per cent of online Nigerians surveyed believed AI products developed within Africa would play an important role in the continent’s economic growth.

Speaking on the findings, Meta’s Director of Public Policy for Sub-Saharan Africa, Balkissa Ide Siddo, described Nigeria as one of the world’s most entrepreneurial and digitally engaged markets.

According to her, Meta platforms are helping to remove traditional barriers to business growth and enabling entrepreneurs to access broader economic opportunities.

“From a tailor in Lagos reaching customers across the country through Instagram, to a small business owner in Kano taking orders on WhatsApp, to a creator in Abuja building a global audience on Facebook, Meta’s platforms are unlocking real economic opportunity,” she said.

Siddo noted that WhatsApp had become a major gateway for AI adoption in Nigeria and across Sub-Saharan Africa.

She added that 93 per cent of Meta AI prompts in the region were made through WhatsApp, indicating that many users were engaging with AI technologies through platforms they already use daily.

The report further stated that 93 per cent of online Nigerian adults surveyed said they felt more connected to wider communities through Meta’s applications.

Also speaking, Alison Neyle, Director at Public First, said the findings reflected the increasing role of digital platforms in supporting entrepreneurship and participation in Nigeria’s growing digital economy.

“Nigeria’s digital transformation is creating new opportunities for businesses, creators and consumers alike.

“With the right combination of infrastructure, platform access and open-source AI, the upside for Nigeria is significant,” Neyle said.

The report projected that Meta’s contribution to Nigeria’s economy could rise to two billion dollars annually as digital adoption deepens and internet access improves across the country.


Kindly share this post
Continue Reading

E-Business

NITDA Unveils AI-Powered Government System That Tracks Workers, Flags Delays Automatically @ICSC 2026

Published

on

Kindly share this post

Kashifu Inuwa, director general of the National Information Technology Development Agency, has called on public institutions and organisations to embrace Artificial Intelligence (AI) responsibly while prioritising human accountability, policy frameworks, and digital skills development.

NITDA Unveils AI-Powered Government System That Tracks Workers, Flags Delays Automatically @ICSC 2026

Rep of DG NITDA, the Director, SMP Department, Dr Aristotle Onumo giving insights into effective public service delivery through digital transformation at the ICSC 2026

Speaking at the International Civil Service Conference 2026, held at the Eagles Square in Abuja, the NITDA boss who was represented by the Director, Stakeholder Management and Partnership department, Dr Aristotle Onumo, disclosed that the Agency has already begun implementing a comprehensive AI Transformation Plan designed to reposition the organisation for long-term institutional efficiency, continuity, and productivity.

According to him, the three-year transformation initiative is aimed at creating a digitally driven institution where operations can continue seamlessly regardless of personnel changes.

“In NITDA as an agency, we have what we call the AI Transformation Plan. It is a kind of three-year plan which we have put in place so that even if the current staff are replaced completely, new personnel should be able to interact with the system and continue work without hindrance,” he stated.

The DG explained that the Agency has already integrated AI into its internal workflow processes, particularly in document management and task tracking.

He noted that official documents submitted at the Agency’s premises are now scanned immediately at the gate and automatically routed by AI systems to the responsible officers based on identified keywords and subject areas.

He added that the AI infrastructure also monitors timelines and flags delays where officers fail to attend to official correspondence within stipulated periods.

“All that is required now is to drop documents at the gate. AI scans and routes them to the appropriate officers. If such documents are not treated within the required timeframe, the system flags them and reports accordingly,” he explained.

While acknowledging concerns surrounding AI adoption, particularly fears about job displacement, the NITDA DG stressed that the technology should be viewed as a tool for improving productivity rather than a threat to human relevance.

“There is always this fear that AI is coming to take away jobs, especially in the public service. But I want to state clearly that the jobs of people who refuse to upskill themselves may eventually be affected. However, those willing to retrain and adapt will benefit immensely from AI,” he said.

To address workforce transition concerns, he revealed that NITDA has commenced agency-wide AI capacity building programmes for all staff members.

According to him, employees whose traditional roles are being transformed by automation are being reassigned and redesignated into emerging AI-related functions.

“We have ensured that everyone undergoes AI training. Those who previously handled manual file operations have now been redesignated as AI assistants and AI administrators. We are preparing our workforce for the future rather than replacing them,” he noted.

The DG further emphasised the importance of maintaining human oversight in AI deployment, warning against the complete removal of human intelligence and accountability from governance systems.

“You must not take away human monitoring and accountability in any AI implementation process. At the end of the day, someone must remain accountable,” he cautioned.

Speaking on governance and regulation, the NITDA boss called for all Ministries, Departments and Agencies (MDAs) to develop internal AI policies capable of defining clear operational boundaries for the technology.

According to him, government deployment of AI differs significantly from private sector usage because public institutions must bear responsibility for any AI-related failures or ethical breaches.

He stressed the need for robust governance frameworks to guide responsible AI use, protect citizens’ rights, and ensure compliance with data protection regulations.

“We must ensure that whatever we use AI for aligns with data protection regulations and responsible use principles. Without proper frameworks, data misuse could become more prevalent and destructive,” he warned.

The NITDA DG also highlighted the Agency’s broader efforts to drive national AI adoption following the development of Nigeria’s National AI Strategy, which he described as one of the country’s most forward-looking digital policy documents.

He stated that NITDA is currently using the Agency as a practical AI sandbox to test implementation models before wider deployment across the public service ecosystem.

As part of efforts to deepen digital capacity across government institutions, he disclosed that NITDA is collaborating with the Office of the Head of Civil Service of the Federation to train civil servants in digital literacy and AI-related competencies.

He reiterated that the future workforce must embrace continuous learning and adaptability to remain relevant in an increasingly AI-driven world.

“AI has not come to replace people completely. But those who refuse to develop their skills may struggle to fit into the evolving technology ecosystem,” he concluded.


Kindly share this post
Continue Reading

Trending