Connect with us

E-Business

Delegate Responsibility not Accountability- Keele

Published

on

Kindly share this post

Allen Keele is a certified fraud examiner, information security manager, information systems auditor and information systems security professional, among 20 other professional and technical accreditations. He shares over 17 years of experience in information security and risk management, including nine years of conducting professional advanced business lectures and seminars across the globe. Keele spoke to hilary okeke on a range of issues.

Training on Fraud Detection and Management
In information security, one of the most important things we have is not always having information security itself but having the internal control to be sure that we have information security. I wrote the text that most people use to prepare for Certified Information Systems Auditors (CISA) exams around the world. In that context, a lot of the controls that the internal auditors monitor have to do with controlling internal breaches and abuse. So, it would make logical sense to extend my auditors knowledge and expertise and interest into internal fraud detection and management. I was shocked to find in my younger days that 90 percent of frauds can be detected through the books. So many organizations tell you that they have no fraud problem but when you take a careful look, you find that there actually is a problem. People device all kinds of means to get money out their organizations without doing anything on the book. That was very concerning to me as an auditor. Fraud in itself is a disaster for an organization. It could lead to loss of market share if made public. Organizations need to be prepared for that kind of disaster just the same way they prepare for fire. So that is why we extended our training to business continuity, disaster recovery, as well as a new perspective on fraud. There are lots of folks out there who offer training on business continuity and disaster recovery, but what we are doing that is unique in the market is that we are not trying to project our best practices; we are teaching according to the new British standard – BS 25999. It is a new international standard designed to keep your business going during the most challenging and unexpected circumstances. It provides a basis for understanding, developing, implementing and managing business continuity within your organization and gives you confidence when dealing with stakeholders both within and outside your organization. BS 25999 has been developed by a group of experts representing a cross-section of industry sectors and governmental organizations which is reflected in its applicability. The standard is suitable for any organization, large or small, from any sector. It is particularly relevant for those that operate in a high risk environment such as the finance, telecommunications, transport, utilities and public sectors, where there is need for continuity. I have had a lot of organizations tell me they went for training a couple of years ago – the British standard may have existed a couple of years ago for training, but it just got ratified recently. There was no standard prior to BS 25999. So, this is a whole new world in terms of getting the certification to prove that your organization has the ability to manage fraud and disaster. Often times, organizations do things because regulators make them. Now more than ever, you have financial regulators requiring you to prove that you have strong control against fraud but you do not even have a fraud policy.
Best Security Strategy for an Organization
The best security strategy is first, to have one. Whether it is fraud, business continuity or information security; organizations have this odd tendency to casually appoint people within the organization to handle those areas. They point to the IT or compliance person – somebody who does not understand that area, and that person has to go and figure out what controls to put in place to get things working. So the problem is that currently, there is no strategy. Nobody has stopped to think “we need to be at 95 percent for fraud capacity at all times, no matter what.” They leave it up to the discretion of people who are not actually accountable for the business. That is wrong! Maybe you have an inexpensive web server that manages your brand new e-commerce that supports 90 percent of your business but because it was not expensive, your IT manager complains that it goes down all the time and that he is going to have it replaced in two weeks. Two weeks for e-commerce? That is why we said that the most important strategy is to have one. It is not just my idea, it is ISO 27001 standard for information security, which instructs that you get a strategy in place. I have always recommended that organizations should first have the right people that are actually accountable for that decision and have them make the decisions for a change. You can delegate responsibility but you cannot delegate accountability.
Networking and Telecommunication in Auditing, Internal Control
ICT has a very important role to play in internal control because auditors control access to information which IT does too. Auditors also control how information is used and how transactions are processed. Over the years, automated control organizes business functions and that has reduced loss of money. So, IT is able to put controls in place but then again, depending on how well it is managed, there might also be some vulnerability. In detecting and managing fraud, you need asset combination. I have often asked people in my classes if their organizations are committed to preventing, detecting and minimizing fraud. And they say yes, absolutely! I ask them to show me a policy that says: “Our organization does not want fraud, and this is what we are going to do to stop it.” They have no fraud policy! Shockingly, a policy is nothing more than a statement of management that states the way things are done within an organization. If you say that controlling fraud is a good objective, where is the policy that not only says it is wrong but also says here is who should be looking for it; here is who should be investigating it and here is what we do if we find it. A fraud policy is where senior managers say “not only am I going to accept responsibility, but I will accept accountability for something going wrong.”
Legal and Ethical Issues Facing IT Auditors
The legal and ethical issues are similar for IT auditors as they are for financial auditors. As an IT auditor, it is possible that you would be dealing with irregular or illegal acts. Towards that end, you have to be careful whom you release information to – there is always tendency for you to be exposed to sensitive information about an organization that you have to protect. As you are investigating issues, you have to be sure that you do not breach privacy laws. For instance, there are laws now that protect account information for people who have bank accounts. Imagine if during the course of an IT audit, the auditor compromised your account, and your account number and access code was made public. That auditor could be in for a lot of legal hassle.

 

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Kaspersky Warns that Scammers are Exploiting World Cup 2026 Travellers

Published

on

Kindly share this post

Kaspersky experts explain which online offers travellers should be cautious of when planning their trip, to avoid spoiling their experience ahead of the upcoming games.

Thousands of fans are expected to attend the World Cup 2026, and many are already handling their travel logistics, purchasing their flights and other transport tickets, booking accommodation, and arranging everything they need to reach the host cities. As interest grows, so does the number of fraudulent schemes that exploit the fact that fans are actively preparing for their upcoming journey.

In late April 2026, Kaspersky experts detected a campaign exploiting the branding of a well-known transport app, targeting users in Mexico. The interface of a fake Spanish-language website, impersonating one of the services, prompts users to enter their phone number and password in order to “claim prizes.” In reality, the attackers are mimicking a trusted brand and attempting to steal users’ credentials from those lured by the promise of a reward.

Some cybercriminals go “a level lower” and post their offers on the dark web. Kaspersky Digital Footprint Intelligence experts discovered a thread advertising such services, published on a shadow forum in March 2026.

The listings included offers for discounted airline tickets, hotel bookings, and match tickets, allegedly at 20% off the original price. These offers are designed to lure users and can be highly dangerous, ultimately resulting in victims losing both their money and any services they expected to receive.

Entrepreneurs and property owners also in the crosshairs

Cybercriminals are also targeting businesses and entrepreneurs at the intersection of the travel industry, which is also involved in the event. Given the high demand for short-term rentals during the tournament, property owners have become an attractive target for scams.

For example, a fake website was discovered requesting account credentials for a well-known platform. In this way, scammers attempt to gain access to property owner accounts, potentially resulting in unauthorised withdrawals and financial losses.

Another common scheme involves fraudsters attempting to extract money from organisations by posing as representatives of well-known airlines and offering fictitious business partnerships. In these emails, they claim to be launching new projects or business expansion initiatives and state that they are actively seeking suppliers or contractors.

If a company representative responds to such an offer, the scammers typically escalate the deception in a subsequent stage. To enhance credibility, they send forged documents for completion and signature, including supplier registration forms and non-disclosure agreements.

The ultimate objective of the fraudsters in this scheme is to induce the organisation to pay a so-called “deposit,” ostensibly required to secure a priority position in a partner selection list.

According to the claims made in the fraudulent communications, this payment would later be fully refunded once the partnership is formally established. In reality, this promise is entirely deceptive. The perpetrators simply appropriate the funds, and no reimbursement is ever made to the victim organisation.

“The travel sector, particularly when it intersects with major events, is a persistent target for a wide range of scams and fraudulent schemes. For end users, it is often difficult to distinguish at first sight between a legitimate website and a spoofed one, or between genuine marketing communications from a reputable service and scam emails.

“We therefore advise treating overly attractive offers with a high degree of caution in order to protect your personal data and financial resources,” says Anna Lazaricheva, senior spam analyst at Kaspersky.


Kindly share this post
Continue Reading

E-Business

Meta Platforms Contributed $820m to Nigeria’s Economy in 2025 – Report

Published

on

Kindly share this post

Meta’s family of platforms, including Facebook, Instagram and WhatsApp, contributed an estimated 820 million dollars in annual economic value to Nigeria in 2025, according to a new report released on Wednesday.

Meta platforms contributed $820m to Nigeria’s economy in 2025 - Report

Meta

The report titled “Nigeria’s Digital Economy” was conducted by independent research firm, Public First, and commissioned by Meta.

It stated that 14 million Nigerian small and medium-scale enterprises (SMEs) used Meta platforms in 2025 to start, run and grow their businesses.

According to the report, the platforms contributed about two billion dollars to Nigeria’s Gross Domestic Product (GDP) while generating an estimated 640 million dollars in productivity gains through instant messaging services.

The report noted that 81 per cent of Nigerian businesses surveyed said Meta platforms had helped them expand their customer base beyond their local areas.

It added that the digital tools had reduced customer acquisition costs and enabled businesses in different parts of the country to access wider markets.

The report also highlighted the growing role of artificial intelligence (AI) in Nigeria’s economy, projecting that AI could contribute 22 billion dollars to the country’s GDP by 2035 under favourable conditions.

It stated that 87 per cent of online Nigerians surveyed believed AI products developed within Africa would play an important role in the continent’s economic growth.

Speaking on the findings, Meta’s Director of Public Policy for Sub-Saharan Africa, Balkissa Ide Siddo, described Nigeria as one of the world’s most entrepreneurial and digitally engaged markets.

According to her, Meta platforms are helping to remove traditional barriers to business growth and enabling entrepreneurs to access broader economic opportunities.

“From a tailor in Lagos reaching customers across the country through Instagram, to a small business owner in Kano taking orders on WhatsApp, to a creator in Abuja building a global audience on Facebook, Meta’s platforms are unlocking real economic opportunity,” she said.

Siddo noted that WhatsApp had become a major gateway for AI adoption in Nigeria and across Sub-Saharan Africa.

She added that 93 per cent of Meta AI prompts in the region were made through WhatsApp, indicating that many users were engaging with AI technologies through platforms they already use daily.

The report further stated that 93 per cent of online Nigerian adults surveyed said they felt more connected to wider communities through Meta’s applications.

Also speaking, Alison Neyle, Director at Public First, said the findings reflected the increasing role of digital platforms in supporting entrepreneurship and participation in Nigeria’s growing digital economy.

“Nigeria’s digital transformation is creating new opportunities for businesses, creators and consumers alike.

“With the right combination of infrastructure, platform access and open-source AI, the upside for Nigeria is significant,” Neyle said.

The report projected that Meta’s contribution to Nigeria’s economy could rise to two billion dollars annually as digital adoption deepens and internet access improves across the country.


Kindly share this post
Continue Reading

E-Business

NITDA Unveils AI-Powered Government System That Tracks Workers, Flags Delays Automatically @ICSC 2026

Published

on

Kindly share this post

Kashifu Inuwa, director general of the National Information Technology Development Agency, has called on public institutions and organisations to embrace Artificial Intelligence (AI) responsibly while prioritising human accountability, policy frameworks, and digital skills development.

NITDA Unveils AI-Powered Government System That Tracks Workers, Flags Delays Automatically @ICSC 2026

Rep of DG NITDA, the Director, SMP Department, Dr Aristotle Onumo giving insights into effective public service delivery through digital transformation at the ICSC 2026

Speaking at the International Civil Service Conference 2026, held at the Eagles Square in Abuja, the NITDA boss who was represented by the Director, Stakeholder Management and Partnership department, Dr Aristotle Onumo, disclosed that the Agency has already begun implementing a comprehensive AI Transformation Plan designed to reposition the organisation for long-term institutional efficiency, continuity, and productivity.

According to him, the three-year transformation initiative is aimed at creating a digitally driven institution where operations can continue seamlessly regardless of personnel changes.

“In NITDA as an agency, we have what we call the AI Transformation Plan. It is a kind of three-year plan which we have put in place so that even if the current staff are replaced completely, new personnel should be able to interact with the system and continue work without hindrance,” he stated.

The DG explained that the Agency has already integrated AI into its internal workflow processes, particularly in document management and task tracking.

He noted that official documents submitted at the Agency’s premises are now scanned immediately at the gate and automatically routed by AI systems to the responsible officers based on identified keywords and subject areas.

He added that the AI infrastructure also monitors timelines and flags delays where officers fail to attend to official correspondence within stipulated periods.

“All that is required now is to drop documents at the gate. AI scans and routes them to the appropriate officers. If such documents are not treated within the required timeframe, the system flags them and reports accordingly,” he explained.

While acknowledging concerns surrounding AI adoption, particularly fears about job displacement, the NITDA DG stressed that the technology should be viewed as a tool for improving productivity rather than a threat to human relevance.

“There is always this fear that AI is coming to take away jobs, especially in the public service. But I want to state clearly that the jobs of people who refuse to upskill themselves may eventually be affected. However, those willing to retrain and adapt will benefit immensely from AI,” he said.

To address workforce transition concerns, he revealed that NITDA has commenced agency-wide AI capacity building programmes for all staff members.

According to him, employees whose traditional roles are being transformed by automation are being reassigned and redesignated into emerging AI-related functions.

“We have ensured that everyone undergoes AI training. Those who previously handled manual file operations have now been redesignated as AI assistants and AI administrators. We are preparing our workforce for the future rather than replacing them,” he noted.

The DG further emphasised the importance of maintaining human oversight in AI deployment, warning against the complete removal of human intelligence and accountability from governance systems.

“You must not take away human monitoring and accountability in any AI implementation process. At the end of the day, someone must remain accountable,” he cautioned.

Speaking on governance and regulation, the NITDA boss called for all Ministries, Departments and Agencies (MDAs) to develop internal AI policies capable of defining clear operational boundaries for the technology.

According to him, government deployment of AI differs significantly from private sector usage because public institutions must bear responsibility for any AI-related failures or ethical breaches.

He stressed the need for robust governance frameworks to guide responsible AI use, protect citizens’ rights, and ensure compliance with data protection regulations.

“We must ensure that whatever we use AI for aligns with data protection regulations and responsible use principles. Without proper frameworks, data misuse could become more prevalent and destructive,” he warned.

The NITDA DG also highlighted the Agency’s broader efforts to drive national AI adoption following the development of Nigeria’s National AI Strategy, which he described as one of the country’s most forward-looking digital policy documents.

He stated that NITDA is currently using the Agency as a practical AI sandbox to test implementation models before wider deployment across the public service ecosystem.

As part of efforts to deepen digital capacity across government institutions, he disclosed that NITDA is collaborating with the Office of the Head of Civil Service of the Federation to train civil servants in digital literacy and AI-related competencies.

He reiterated that the future workforce must embrace continuous learning and adaptability to remain relevant in an increasingly AI-driven world.

“AI has not come to replace people completely. But those who refuse to develop their skills may struggle to fit into the evolving technology ecosystem,” he concluded.


Kindly share this post
Continue Reading

Trending