E-Business
COVID-19: Sophos Offers 5 Cybersecurity Tips to Remote Workers
Following the Federal and State Governments directives that businesses in Nigeria should adopt measures to curtail the spread of Coronavirus many if not most organisations have already crossed the “working from home”, or at least the “working while on the road” bridge.
Therefore, the global concerns over the current coronavirus (Covid-19) outbreak, and the need to keep at-risk staff away from the office, means that lots of companies may soon and suddenly end up with lots more staff working from home
A global cybersecurity Company has also suggested that it is vital not to let the precautions intended to protect the physical health of a company staff turn into a threat to their cybersecurity health at the same time.
“Importantly, if you have a colleague who needs to work from home specifically to stay away from the office then you can no longer use the tried-and-tested approach of getting them to come in once to collect their new laptop and phone, and to receive the on-site training that you hope will make them a safer teleworker”, Paul Ducklin, Principal Research Scientist Sophos, said while stressing that organisations are now in need to set remote users up from scratch, entirely remotely, something some have not done a lot of in the past.
Ducklin went ahead to list five tips for working from home safely:
- Make sure it’s easy for your users to get started:
“Look for security products that offer what’s called an SSP, short for Self-Service Portal. What you are looking for is a service to which a remote user can connect, perhaps with a brand new laptop they ordered themselves, and set it up safely and easily without needing to hand it over to the IT department first.
“Many SSPs also allow the user to choose between different levels of access, so they can safely connect up either a personal device (albeit with less access to fewer company systems than they’d get with a dedicated device), or a device that will be used only for company work.
“The three key things you want to be able to set up easily and correctly are: encryption, protection and patching.
“Encryption means making sure that full-device encryption is turned on and activated, which protects any data on the device if it gets stolen; protection means that you start off with known security software, such as anti-virus, configured in the way you want; and patching means making sure that the user gets as many security updates as possible automatically, so they don’t get forgotten.
“Remember that if you do suffer a data breach, such as a lost laptop, you may well need to disclose the fact to the data protection regulator in your country.
“If you want to be able to claim that you took the right precautions, and thus that the breach can be disregarded, you’ll need to produce evidence – the regulator won’t just take your word for it!
- Make sure your users can do what they need
“If users genuinely can’t do their job without access to server X or to system Y, then there’s no point in sending them off to work from home without access to X and Y.
“Make sure you have got your chosen remote access solution working reliably first – force it on yourself! – before expecting your users to adopt it.
“If there are any differences between what they might be used to and what they are going to get, explain the difference clearly – for example, if the emails they receive on their phone will be stripped of attachments, don’t leave them to find that out on their own.
“They’ll not only be annoyed, but will probably also try to make up their own tricks for bypassing the problem, such as asking colleagues to upload the files to private accounts instead.
“If you’re the user, try to be understanding if there are things you used to be able do in the office that you have to manage without at home.
- Make sure you can see what your users are doing
“Don’t just leave your users to their own devices (literally or figuratively). If you’ve set up automatic updating for them, make sure you also have a way to check that it’s working, and be prepared to spend time online helping them fix things if they go wrong.
“If their security software produces warnings that you know they will have seen, make sure you review those warnings too, and let your users know what they mean and what you expect them to do about any issues that may arise.
“Don’t patronise your users, because no one likes that; but don’t leave them to fend for themselves, either – show them a bit of cybersecurity love and you are very likely to find that they repay it.
- Make sure they have somewhere to report security issues
“If you haven’t already, set up an easily remembered email address, such as security911 @ yourcompany DOT example, where users can report security issues quickly and easily.
“Remember that a lot of cyberattacks succeed because the crooks try over and over again until one user makes an innocent mistake – so if the first person to see a new threat has somewhere to report it where they know they won’t be judged or criticised (or, worse still, ignored), they’ll end up helping everyone else.
“Teach your users – in fact, this goes for office-based staff as well as teleworkers – only to reach out to you for cybersecurity assistance by using the email address or phone number you gave them. (Consider snail-mailing them a card or a sticker with the details printed on it.)
“If they never make contact using links or phone numbers supplied by email, they they are very much less likely to get scammed or phished”.
5. Make sure you know about “shadow IT” solutions
Shadow IT is where non-IT staff find their own ways of solving technical problems, for convenience or speed.
“If you have a bunch of colleagues who are used to working together in the office, but who end up flung apart and unable to meet up, it’s quite likely that they might come up with their own ways of collaborating online – using tools they’ve never tried before.
“Sometimes, you might even be happy for them to do this, if it’s a cheap and happy way of boosting team dynamics.
For example, they might open an account with an online whiteboarding service – perhaps even one you trust perfectly well – on their own credit card and plan to claim it back later.
“The first risk everyone thinks about in cases like this is, “What if they make a security blunder or leak data they shouldn’t?”
“But there’s another problem that lots of companies forget about, namely: what if, instead of being a security disaster, it’s a conspicuous success?
“A temporary solution put in place to deal with a public health issue might turn into a vibrant and important part of the company’s online presence.
“So, make sure you know whose credit card it’s charged to, and make sure you can get access to the account if the person who originally created it forgets the password, or cancels their card.
“So-called “shadow IT” isn’t just a risk if it goes wrong – it can turn into a complicated liability if it goes right!
Most of all, the Paul Ducklin added, “if you and your users suddenly need to get into teleworking, be prepared to meet each other half way.
“For example, if you’re the user, and your IT team suddenly insists that you start using a password manager and 2FA (those second-factor login codes you have to type in every time)…
“…then just say “Sure,” even if you hate 2FA and have avoided it in your personal life because you find it inconvenient.
“And if you’re the sysadmin, don’t ignore your users, even if they ask questions you think they should know the answer to by now, or if they ask for something you’ve already said “No” to…
“…because it might very well be that they’re asking because you didn’t explain clearly the first time, or because the feature they need really is important to doing their job properly.
“We’re living in tricky times, so try not to let matters of public health cause the sort of friction that gets in the way of doing cybersecurity properly!
Other Sophos Resources Related to COVID-19 that you may find useful:
SophosLabs has uncovered a variety of different malicious email campaigns connected to COVID-19, including:
Phishing scams impersonating the WHO, CDC, and other healthcare organizations to deliver malware via malicious documents disguised as official information on how to stay safe during the pandemic
Cybercriminals impersonating charities and relief organizations like the WHO’s COVID-19 Solidarity Response Fund to trick victims into sending them Bitcoin
SophosLabs is updating its Uncut blog with new findings in real time
E-Business
Zequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector
Mr Adeoye Oludamilola, managing director, Zequence Digital, a digital agency, has said strong enforcement of Intellectual Property (IP) laws , protection of Nigeria’s software industry against piracy will encourage innovation and investment.
Adeoye told reporters lately in Lagos that software piracy and the unauthorised use of proprietary technology are widespread in the country.
According to report Intellectual Property (IP) laws in software refers to the legal rights that protect the creations of the mind used in software development.
These rights, which include copyrights, patents, trade secrets, and trademarks, grant developers exclusive control over their software and related assets, preventing unauthorised use or reproduction.
Adeoye said that many startups do not protect their innovations, due to a lack of knowledge and the cumbersome legal processes involved.
“IP registration and litigation are expensive and time-consuming, which further discourages developers from protecting their work,” Adeoye said.
He added that the lack of awareness among developers about their IP rights contributed to the problem.
To address these challenges, Adeoye stressed the need for the formation of an IP Protection Consortium, comprising tech firms, legal experts, and regulators, to advocate for stronger IP enforcement.
He also suggested collaborating with legal tech startups to create simplified platforms for fast-tracked IP registration.
The managing director further called for joint initiatives between legal bodies and tech communities to launch IP rights education campaigns.
This, he said, would equip developers with the knowledge they needed to protect their innovations and grow their businesses.
Adeoye emphasised the need for the government and stakeholders to create an ecosystem for development and inclusivity by proactively engaging with regulators.
According to him, this will help ensure that policies are created with the input of concerned agencies and industry experts.
PalmPay, a leading fintech platform and full-stack digital neobank for emerging markets, has partnered with Nigeria’s biggest Health Insurance Company, AXA Mansard Health a member of the globally trusted AXA Group, to provide millions of Nigerians with affordable, accessible digital health insurance.
This strategic partnership enables PalmPay users to seamlessly access a range of health insurance packages from AXA Mansard directly within the PalmPay app. With plans starting as low as N500 per month, users can now choose from flexible insurance options tailored to fit their everyday needs.
The plans are designed to meet a wide range of needs; for example, the AXA Digital Health plan offers access to telemedicine consultations with doctors, N5,000 worth of medications, and up to N40,000 in surgical coverage. Users can also opt for the AXA Mansard MicroHealth plan at N1,000 per month, which provides unlimited diagnostic tests and funeral benefits. Additionally, the AXA Mansard Accident plan, available for N500 monthly, offers comprehensive death cover for both accidental and non-accidental cases.
Speaking on the partnership, Habib Kowontan, Head of Wealth Product at PalmPay, said: “Insurance is a key pillar of financial security, yet millions of Nigerians remain underserved. Our partnership with AXA Mansard Health breaks down long-standing barriers by placing reliable and affordable insurance solutions right at our users’ fingertips.”
In her remarks, Jumoke Odunlami, Chief Distribution Officer, AXA Mansard Insurance said that the partnership with Palmpay presents the AXA with another opportunity to improve health and productivity of Nigerians. “Through partnerships like this, we are covering over 1.8 million Nigerians and ensuring that healthcare is accessible, available and affordable.
“So we are excited about joining forces with a brand like Palmpay to compliment the range of financial possibilities they offer their customers with health plans. It fits well with our mission and our purpose of acting for human progress by protecting what matters, and we are looking forward to doing even more with Palmpay”, she explained.
This partnership reflects PalmPay’s broader mission to create a more inclusive digital financial ecosystem, one that empowers users to not only manage their money efficiently, but also secure their future.
This partnership reflects PalmPay’s broader mission to create a more inclusive digital financial ecosystem, one that empowers users to not only manage their money efficiently, but also secure their future.
By Diana Tenebe, Chief Operating Officer, Foodstuff Store
Nigeria’s agricultural sector, a cornerstone of its economy, faces a critical crossroads. While employing a staggering 40% of the population and holding over 84 million hectares of arable land, the industry is hobbled by deep-seated challenges. Low productivity, a fragmented supply chain, poor infrastructure, and a lack of access to financial services are just a few of the hurdles that prevent the sector from reaching its full potential. Coupled with the unpredictable and severe shocks of climate change—from prolonged droughts to devastating floods—these issues threaten the food security of a rapidly growing population.
Diana Tenebe
To truly transform this vital sector, a new approach is needed, one that moves beyond traditional methods and embraces the power of technology. Artificial Intelligence (AI) is not just a futuristic buzzword; it is the imperative for Nigeria’s agricultural revolution. AI holds the key to unlocking higher yields, building resilience, and fostering an inclusive and sustainable food system that can feed a nation and drive economic growth.
The most immediate impact of AI is in the area of precision farming. By integrating AI with technologies like Internet of Things (IoT) sensors, drones, and satellite imagery, farmers can gain an unprecedented understanding of their land. AI-powered systems can analyse real-time data on soil moisture, nutrient levels, and plant health, providing actionable insights for targeted interventions. For instance, smart irrigation systems can optimize water usage, a critical resource in a country facing increasing water scarcity. AI-enabled drones can survey vast farmlands in minutes, identifying early signs of pests or disease and allowing for precise application of pesticides, reducing chemical use and cost. Early trials of these technologies in Nigeria have already demonstrated significant gains, with some reports showing a remarkable 60-70% increase in crop yields.
Climate adaptation is another area where AI’s role is indispensable. Nigeria’s farmers are on the front lines of climate change, enduring erratic rainfall and extreme weather events. AI can provide a shield against this volatility. By analyzing historical weather data and real-time forecasts, AI models can offer accurate, localized predictions. This allows farmers to proactively adjust their planting schedules, select climate-resilient crop varieties, and plan for potential risks, effectively mitigating the devastating impact of droughts and floods.
The economic benefits extend far beyond the farm gate. A significant portion of Nigeria’s agricultural produce is lost due to an inefficient and fragmented supply chain. AI can streamline logistics, optimize transportation routes, and enhance inventory management. By reducing spoilage and waste, AI ensures that more of what is harvested reaches the market, thereby boosting the incomes of farmers and providing a more stable supply of food for consumers. The success of Nigerian agritech companies like Crop2Cash, which has reportedly helped over 500,000 farmers increase their income by up to 70%, demonstrates the tangible economic impact of these technologies.
AI is a powerful tool for promoting financial inclusion and education. Millions of smallholder farmers, who form the backbone of Nigerian agriculture, are often excluded from formal financial systems due to a lack of collateral and credit history. AI-driven fintech solutions can bridge this gap by assessing creditworthiness using alternative data, making it easier for farmers to access the loans and insurance they need to scale their operations. AI-powered mobile apps and chatbots can also serve as virtual extension agents, providing personalized advice on best farming practices, pest control, and crop management, democratizing knowledge and empowering farmers to make better decisions.
Despite this immense potential, the journey towards widespread AI adoption is not without its hurdles. High upfront costs for AI-enabled equipment, a general lack of understanding and experience with these tools, and a preference for traditional methods are all significant barriers. Furthermore, infrastructural gaps, including poor roads and inadequate storage facilities, hinder the seamless implementation of these technologies. Data availability and computational capacity are also key challenges that need to be addressed.
However, the Nigerian government and a burgeoning ecosystem of agritech startups are already paving the way forward. The government’s vision is articulated in initiatives like the National AI Strategy, which aims to establish AI research centers and support R&D. Programs such as the Nigeria Artificial Intelligence Research Scheme (NAIRS) and the NITDA AI Developers Group are building the necessary skills among entrepreneurs and farmers. Strategic partnerships between government bodies, financial institutions, and innovative startups are creating localized solutions that are tailored to the unique conditions of Nigerian agriculture.
Ultimately, AI is not a luxury but an imperative for Nigeria to unlock its agricultural potential. Its successful integration will transform the role of the farmer from a manual laborer to a strategic planner and overseer of a smart, efficient, and sustainable food system.
By investing in infrastructure, fostering strategic partnerships, and prioritizing education and capacity building, Nigeria can harness the power of AI to feed its people, drive economic prosperity, and secure its place as a leader in the African agricultural revolution.
Zinox Chairman Leo Stan Ekeh Donates State-of-the-Art Tech Experience Centre to Federal University Birnin Kebbi
NIMC Sets 48-hour Deadline for Diaspora Partners to Activate New Licences
Airtel Money Africa Partners pawaPay for Seamless International Remittances Across Africa
NBS Reports ₦6.72 Trillion VAT Haul as Tax Reforms Pay Off
Rubrik Joins Forces with Sophos to Reinvent M365 Recovery
News2 days agoGoogle Hit by AI-driven Cyber Attack
General News2 days agoKuwait Busts Nigerian Cybercrime Ring Targeting Telecom Tower, Banks
News2 days agoFIRS Rolls out e-invoicing System for Large Corporate Taxpayers
E-Business2 days agoZequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector
Telecom2 days agoMTN Nigeria’s Mega Billion Promo Turns Airtime into Fortune for Thousands Amid Economic Strain
Telecom2 days agoT2 Commits to Innovation, Resilience as Customer-centric Ethos Form New Focus
Telecom2 days agoI see Crisis, Resignations @ MTN, Airtel, Others – Primate Ayodele
E-Business2 days agoPalmPay Partners AXA Mansard Health to Make Digital Insurance Accessible, Affordable