Connect with us

E-Business

Best DR Plan Can be Invalidated by a Wrong Hand-Dijkstra

Published

on

Kindly share this post

Marc Dijkstra, chief technology officer, Symantec in charge of the Emerging Region including Russia, the Middle East, Southern Mediterranean and Africa. He has an in-depth knowledge of the data management, storage and high availability landscape.  Marc worked with Computer Work Station Sales as a support engineer before he moved to VERITAS UK as a Storage and Availability Presales specialist before joining Symantec in 2007.  He spoke to emeka okafor.

Promoting Green IT

From Symantec perspective, being a software and infrastructure company and taking into cognizance that we are into storage and virtualization technology, promoting Green IT is something we are heavily into. We have a number of tools that help customers identify areas which they can actually save cooling and heating costs saving amount of storage that they use.  As an example, we have one of our products that can identify when you are underutilizing your storage. One of the biggest problems you can have is underutilization of your storage. When you have all these and they are not being used you still pay electricity bill as you need to cool the systems. . We can identify the storage that is not in use and try to drive utilization up by mopping the underutilization storage to the storage element we can identify. So every thing Green IT, we have a number of tools also as a consulting firm that can identify how much power we can save by dragging up utilization process.

Optimizing Storage Resources Utilization

One of the things we looked at when we started the standardization initiative was that it is part of our bold strategies to identify within the storage management brief. One of the things we did was to identify where we could save customers Tier One storage cost by moving data from Tier One storage to the secondary storage having the same data. We do that in subtle space.  We have a customer in Nigeria who is looking at ways to take their old data   from Tier One old expensive disc and put it on a cheaper disc. He estimated that he could save approximately 80 per cent of his storage disc by moving the Tier One disc into the Tier Two disc at a much lower price than the Tier One disc. It means that the customer doesn’t need to buy a new storage system .He can buy the cheapest disc and a recycle forward will be able to take that data and put it on to shape.

Overview of Products

Symantec has a number of products. I have lost count but I think it has close to 200 products. Symantec is storage and availability company as well as a security company. We have a very bold range of products from the traditional security products, back up products, duplication, archiving, enterprise desktop management etc, but the joy of Symantec is that we are a heterogeneous company and we have a very broad range of applications on storage. According to IDC Report (late last quarter) Symantec is now the number one leader in the storage management space and we lead significantly over the other competitors. The product I work more is on high availability and storage management space.

Guidelines for a Successful Storage Strategy

Testing, testing, and testing. We did a Disaster Recovery Report in 2008 and one of the problems we had is that people are not testing the disaster recovery strategy enough. People will do DR test once a year but it is not effective. It’s really not effective to cover all the bases. Two tests once every six months is ideal. There is need to do for instance virus test to ascertain what will happen if virus hits the system and that is very important.  Besides testing, DR is expensive especially if you are running critical operations like Telcos and mobile providers of the billing system. You cannot switch that system off otherwise you will be affecting the service of your consumers. So you have to balance how you are going to test your DR without affecting your customers, your bottom line, and your staff. I think the industry is thinking more along how to automate the testing without having disruption and Symantec has ways we actually allow you to automate DR tests without disrupting your actual application.
  It is one key word when it comes to disaster recovery- the planning. Having a good disaster recovery plan and doing your risk analysis is most important in DR strategy because whatever happens we make sure that it works.
  
Best Practice for Disaster Recovery
 
 It is firstly, the plan has to be in place. Be it internal plan or an outside consulting plan, the business has to have understanding of what the risk appetite is. What can they afford to do without and for how long? If it is a financial institution that is doing online trading, it can’t really be down. Government legislation in some cases will actually disallow that so your risk appetite has to be assessed before you can identify. So once your DR plan is actually in place and you have identified your risk appetite then you can identify the way you go. But remember how much you do it depends on cost as we have a sliding scale for various services I think the  most important thing when talking about best practice is that once you identify the risk appetite you must identify plan and once your plan is in place it must be assessed. We have a very interesting statistics that in 2007 we found 55% of our respondents at the C level were involved in DR planning                                                  process. Last year we found that it dropped to 33%. So one question is that has DR become little focused or was it a defect in the organization that it just had to happen? It’s a question I have asked in Nigeria. The people I have spoken to in Nigeria are very more executive level discussions. The C level is involved in the DR strategy, DR process and DR planning. Either that in your office you will have a DR strategy committee to discuss the most important issues on DR strategy and not doing it once and  leaving it because you need to continue with your testing on hourly basis and at the centre. One wrong man point can invalidate the whole outline

Focus of Symantec Products

It all depends. A lot of people even small to mediums are trying to locate their risks appetite, what they can do to keep their businesses up and running. From small to mediums if they lose their data could mean the end of the business. So you get to look at ways to do it. Small to mediums may not have DR strategy the way a financial house will have with gig net, internet. We play in all spaces, be it small to medium businesses, even to consumer.

IT Risk Management

IT risk management from Symantec perspective, we do certainly get involved in IT risks assessment in understanding the risk appetite with the customer. From my perspective, IT risk management understands the risk of the business either from internal or external, hacking, be it data loss, natural disaster or whatever it could be and und a committee in change control. Remember if you don’t have a change committee you are introducing risk into your environment.

Customers in Nigeria

I met with a number of executives from finance a couple of months back and the interesting thing to me was that although this knowledge is special but what made clear to me at the moment is  that the CIOs  are certainly coming down the line. Nigeria seeing what is going on in the Americas, India, MEA and Europe, there is legislation about keeping your data available, there’s legislation about holding data especially in the finance industry so it is in their minds. I wouldn’t say from my experience in dealing with the people. Email availability all the time is very important to people, I have a very lengthy discussion with CIOs about a month ago around the six points and it is very much in the full front of their minds.

New Products

What you will see coming down the line in the nearest future is looking at ways of mitigating the risks to the business. We mitigate risk by automating processes and by doing correct testing. What we will be looking at in our new product is that we will be looking at ways to go and test the environment and do risk analysis on the environment, weigh and identify the risks and report home the risk before problem happens. High availability cost ream technology will do the risks of the strategy and help check analysis and find out where issues are. It is one of the control processes you can look at multi- faceted, if one of the PCs fails its all about mitigation of risks      

Energy Problem
 
   One of the things Symantec is driving for is to reduce the amount of heating in the environment. One of the things talked about in the DR report as well as the stage of the data centre report just released is that the strategy of the CIO data center manager is still around consolidation, virtualization and automation. These are the three key areas in the 2007 report that came up again in 2008. By going the virtualization route, you are driving down the electricity needs. The Green IT makes this strong. So if we can tie Green IT with the strategy of the data center we are driving down the huge need of electricity. With our technology you use less service and storage so we are helping the customer drive down demand for electricity used to cool and power the data center. Virtualization is one of the strategies from Symantec through which demand for storage electricity is reduced. With the cost ream technology you don’t need as many services so you are driving down the cost of electricity again.  There is electricity problem even in South Africa also. It is not just Africa that has electricity problem. There was a report in California running out of power. There’s a problem in Florida. Electricity  is a global crisis so Symantec and IT industry have to look at innovative ways to drive down need for this power.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

FG Seeks Inclusive, Human-centred Artificial Intelligence Policies

Published

on

Kindly share this post

The Federal Government has called for the development of inclusive and human-centred artificial intelligence policies that protect workers’ rights and prevent job losses while harnessing the technology’s potential to drive economic growth and productivity.

The Minister of Labour and Employment, Dr. Muhammad Dingyadi, made the call during the 114th Session of the International Labour Conference in Geneva, Switzerland, while responding to the report of the Chairperson of the Governing Body and the Director-General of the International Labour Organisation, titled “A Moment of Choice: Harnessing Artificial Intelligence for Decent Work,” on Thursday.

Dingyadi said the rapid advancement of AI is transforming labour markets, workplace practices and employment relationships globally, creating both opportunities and challenges for governments, employers and workers.

He noted that while AI can stimulate innovation, improve productivity and expand economic opportunities, it also poses significant risks, including job displacement, widening inequalities and the erosion of the human role in some sectors of the economy.

“The world is moving forward at a rapid pace, underpinned by advances in AI, and we as an organisation must match that pace. While welcoming the positive transformations AI offers, we are also pondering the uncertainties it connotes.

“These shifts, despite their benefits, also cast a dark cloud of uncertainty. Where AI creates new jobs, there may be job losses. Where digital and AI infrastructures are created, there may be a loss of the traditional role and value of the human factor in the work process. We therefore need a balanced approach that ensures that, while harnessing the benefits of AI, the attendant risks do not rob our societies of the gains of decent work,” he said.

The minister commended the ILO leadership for its commitment to advancing the organisation’s mandate despite mounting global economic and social challenges.

Highlighting Nigeria’s efforts to position itself within the rapidly evolving digital economy, Dingyadi said the Federal Government had established the Ministry of Communications, Innovation and Digital Economy to spearhead policies aimed at accelerating technological development and strengthening the country’s competitiveness.

According to him, Nigeria has already begun integrating digital technologies and AI into governance systems through the automation of civil service processes and public service delivery.

“I’m also pleased to inform you that Nigeria is steadily harnessing the gains of this initiative in our Public Service. There is the service-wide automation of civil service processes and communication with AI playing a significant role. Additionally, platform work is gaining ground,” he said.

The minister also welcomed ongoing discussions within the ILO on regulating work in the platform economy, stressing the need for labour standards that protect workers engaged in emerging forms of employment created by digital technologies.

Beyond AI, Dingyadi reiterated Nigeria’s longstanding call for reforms within the ILO, urging member states to accelerate the ratification of the 1986 Amendment to the organisation’s Constitution and review the criteria used to determine countries of Chief Industrial Importance.

He argued that such reforms would promote greater inclusivity, fairness and regional representation within the ILO’s governance structures.

The minister further urged countries to align the ILO Centenary Declaration and the Global Coalition for Social Justice with national development priorities to ensure that technological innovation contributes to social progress and decent work.

Nigeria’s intervention comes amid growing global debate over the impact of artificial intelligence on jobs and the future of work.

According to international labour and development agencies, AI is expected to automate some routine tasks while simultaneously creating new employment opportunities in technology, data science, digital services and other emerging sectors.

However, concerns persist that workers in administrative, clerical and repetitive occupations could face significant disruptions if governments fail to implement policies that support skills development, social protection and workforce transition.

The issue has become a central focus of discussions at the ongoing International Labour Conference, where governments, employers and workers’ representatives are examining how AI can be deployed in ways that promote productivity and economic growth without undermining labour rights, job security and social justice.

For Nigeria, the conversation is particularly significant as the country pursues an ambitious digital transformation agenda aimed at expanding broadband access, growing the digital economy and creating millions of technology-driven jobs for its youthful population.

Experts have repeatedly stressed that achieving these goals will require investments in digital skills, education and worker protections to ensure that the benefits of AI are broadly shared across society.


Kindly share this post
Continue Reading

E-Business

Kaspersky Reveals Credential Abuse Techniques Rank as Attackers’ Most Effective Tactic

Published

on

Kindly share this post

According to a recent global report by Kaspersky Security Services, password guessing and valid account misuse rank among the most effective tactics used by cyber criminals in 2025.

This trend reflects a strategic shift, as attackers move away from triggering endpoint protection with noisy malware, in preference of leveraging legitimate access to evade detection.

The ‘Anatomy of a Cyber World’ is an in-depth global report based on data gathered from Kaspersky Managed Detection and Response (MDR), Incident Response (IR), Compromise Assessment and SOC Consulting in 2025. It covers the most common adversary techniques, tools and detection scenarios and highlights the peculiarities of detected incidents.

According to the report, a significant portion of the most frequently monitored attack techniques revolves around credentials and identity management. This analysis, which examines the conversion rates* of various Indicators of Attack (IoA), highlights the following prevalent malicious tactics:

Password guessing – 34.8%. This technique entails attackers systematically trying different passwords until successfully gaining access to an account. It tops the conversion list due to its occurrence in both actual attacks and authorised security assessments, making it a persistent threat in today’s cybersecurity landscape. Organisations who rely on weak or reused passwords continues to enable this age-old strategy.

Local account creation – 34.7%. Once inside a system, attackers frequently create new local accounts to maintain access even if their original foothold is discovered and removed. This technique is frequently observed during security exercises and can be detected — but only with the right telemetry in place, which is often lacking.

Valid account abuse – 34.5%. Instead of deploying malware, attackers log in using stolen or compromised credentials and simply blend in with normal user activity. This makes detection significantly harder, as the access itself appears legitimate. The high conversion rate underscores why compromised credentials remain one of the most dangerous attack vectors.

Account manipulation – 32%. Attackers modify existing accounts to consolidate access such as by activating disabled accounts, altering group memberships, or escalating privileges. This reinforces the broader pattern — rather than introducing new tools, adversaries deepen their control using what is already there.

Network service discovery – 31.2%. Before moving deeper into a network, attackers typically scan for open services and systems they can reach. This reconnaissance step is a strong predictor of what follows: lateral movement and further exploitation. Detecting it early provides security teams a critical window to intervene.

The report ranks attacker techniques by how frequently observed activity ultimately resulted in confirmed malicious incidents. According to Kaspersky experts, while MITRE ATT&CK® catalogs a vast number of adversary techniques, effective detection requires prioritising behaviours with the highest probability of malicious intent while avoiding excessive false positives.

“Threat actors do not always need sophisticated malware to achieve their objectives. In many cases, legitimate administrative tools and compromised accounts remain the fastest and most effective way to move inside an organisation while avoiding detection.

The continued popularity of these techniques shows that organisations need deep visibility into attacker behaviour and the ability to correlate suspicious activity across different stages of an attack.

To address these challenges, companies can enhance their security with our solutions: Kaspersky Managed Detection and Response and Incident Response which cover the entire incident management cycle – from threat detection to continuous protection and remediation,” comments Sergey Soldatov, Head of Security Operations Center at Kaspersky.


Kindly share this post
Continue Reading

E-Business

INEC Probes Claims of Leaked Voter Data from CVR System

Published

on

Kindly share this post

Independent National Electoral Commission (INEC) has started looking into reports of unauthorized access to its Continuous Voter Registration (CVR) database, according to Mohammed Kudu Haruna, national commissioner and chairman of the Information and Voter Education Committee (IVEC),

INEC Probes Claims of Leaked Voter Data from CVR System

Haruna, in a statement on Tuesday said that was aware of the allegations spreading on social media and in some news outlets.

“The Independent National Electoral Commission is aware of rumors currently circulating on social media and in certain media about unauthorized access to the Commission’s Continuous Voter Registration  (CVR) database.

These claims include the publication of information about a candidate from recent political party primaries in the Federal Capital Territory.

“The Commission takes this allegation very seriously and has quickly begun a thorough investigation to find out what really happened,” the statement noted.

INEC clarified that during the ongoing nationwide CVR process, registered officers were given limited access to specific parts of the registration system.

This access helps them manage voter registrations, transfer requests, and updates to voter records.

The commission stated that access to the information is only allowed for official duties and is taken away once the task ends.

Haruna revealed that initial findings from the commission’s audit trail helped pinpoint the user account used to access the information.

“The audit trail from our early investigation has allowed us to find out which user account was involved. As a result, we’ve questioned relevant staff, and all departments related to this matter are fully cooperating with the investigation,” it mentioned.

The commission also said it is looking into all technical, administrative, and operational details of the situation to figure out who is responsible and whether any internal access-control rules were broken.

However, INEC reported that its early findings indicated there was no outside breach of its systems.

Advertisement

“Our initial findings from the audit trail suggest that there was no external breach of the CVR database, no hacking incident, and no unauthorized outside access to our ICT systems.”

“Instead, the information in question was accessed using valid user credentials assigned to personnel involved in the ongoing CVR exercise but was released without proper authorization,” added the statement.

The commission emphasized that this incident involved retrieving a specific voter record and did not indicate any risk to the overall voter registration system or the personal data of over 90 million registered voters.

“The investigation is focused on the retrieval of a specific voter record and does not suggest any risk to the overall voter registration system or the personal data of over 90 million registered voters, according to the statement.

INEC emphasized that it is dedicated to safeguarding voter information and ensuring the integrity of its electoral systems.

“The Commission clearly states that it takes the security, privacy, and integrity of voter data very seriously. It remains committed to transparency, institutional integrity, and protecting voters’ personal details,” the statement noted.

The commission also announced that the Department of State Services has started its own investigation into this issue.

“Additionally, the Department of State Services has independently begun an investigation. The Commission will fully cooperate with all relevant security agencies and will not hesitate to take legal action against anyone found responsible,” the statement continued.

INEC encouraged the public and media to refrain from making assumptions while investigations are ongoing, promising that it will share its findings and any actions taken in due time.


Kindly share this post
Continue Reading

Trending