E-Business
IoT Security Expands Over Half of Global Enterprise IT Security Programs by 2020
The power of objects in the Internet of Things (IoT) to change the state of environments — in addition to generating information — will cause chief information security officers (CISOs) to redefine the scope of their security efforts beyond present responsibilities, according to Gartner, Inc.
Gartner predicts that IoT security requirements will reshape and expand over half of all global enterprise IT security programs by 2020 due to changes in supported platform and service scale, diversity and function.
“The IoT is redrawing the lines of IT responsibilities for the enterprise,” said Earl Perkins, research vice president at Gartner. “IoT objects possess the ability to change the state of the environment around them, or even their own state; for example, by raising the temperature of a room automatically once a sensor has determined it is too cold or by adjusting the flow of fluids to a patient in a hospital bed based on information about the patient’s medical records. Securing the IoT expands the responsibility of the traditional IT security practice with every new identifying, sensing and communicating device that is added for each new business use case.”
Traditional “information” technology is now being supplemented by purpose-built, industry-specific technologies that are tailored by where and how that technology is used and what function it delivers. Information remains a key deliverable and is the fuel for IoT devices.
The device’s ability to identify itself (such as RFID tags that identify cargo), sense the environment (such as temperature and pressure sensors) or communicate (such as devices in ocean buoys that transmit environmental changes to the areas around them) requires information to be generated, communicated and/or used.
Although traditional IT infrastructure is capable of many of these tasks, functions that are delivered as purpose-built platforms using embedded technology, sensors and machine-to-machine (M2M) communications for specific business use cases signal a change in the traditional concept of IT and the concept of securing IT.
“This is an inflection point for security. CISOs will need to deconstruct current principles of IT security in the enterprise by re-evaluating practices and processes in light of the IoT impact,” said Mr. Perkins. “Real-time, event-driven applications and nonstandard protocols will require changes to application testing, vulnerability, identity and access management (IAM) — the list goes on.
Handling network scale, data transfer methods and memory usage differences will also require changes. Governance, management and operations of security functions will need to change to accommodate expanded responsibilities, similar to the ways that bring your own device (BYOD), mobile and cloud computing delivery have required changes — but on a much larger scale and in greater breadth.”
Although the business use cases being identified daily are indeed innovative and new, the technologies and services that deliver them are seldom new as well — they are also seldom uniform in architecture and design. Each use case risk profile has specific requirements that may result in the use of old platform and service architecture with a new technology “overlay” to improve performance and control.
“This represents an interesting challenge for CISOs when delivering secure services for the IoT,” said Mr. Perkins. “In some cases, it may be a ‘past is future’ exercise in evaluating mainframe, client/server, Web, cloud and mobile security options as part of an overall IoT business use case.
Even out-of-maintenance systems such as Windows XP may still play a critical role for some industry infrastructure as part of an IoT security system. Security planners should not throw away their old security technology manuals just yet.”
CISOs should not automatically assume that existing security technologies and services must be replaced; instead, they should evaluate the potential of integrating new security solutions with old. Many traditional security product and service providers are already expanding their existing portfolios to incorporate basic support for embedded systems and M2M communications, including support for communications protocols, application security and IAM requirements that are specific to the IoT.
“At this time, there is no ‘guide to securing IoT’ available that provides CISOs with a framework for incorporating IoT principles across all industries and use cases,” said Mr. Perkins. “Another unique characteristic of the IoT is the sheer number of possible combinations of device technologies and services that can be applied to those use cases. What constitutes an IoT object is still up for argument, so securing the IoT is a ‘moving target.’ However, it is possible for CISOs to establish an interim planning strategy, one that takes advantage of the ‘bottom-up’ approach available today for securing the IoT.”
CISOs should resist the temptation to overthink security planning while patterns and solutions are still emerging. They should start small and develop initial security projects based on specific IoT interactions within specific business use cases. CISOs can build on these use case experiences to develop common security deployment scenarios, core architectural foundations and competency centers for the future.
“The requirements for securing the IoT will be complex, forcing CISOs to use a blend of approaches from mobile and cloud architectures, combined with industrial control, automation and physical security,” said Mr. Perkins.
“Fortunately, many of the security requirements for the IoT will look familiar to the CISO. The technologies and services that have been used for decades to secure different eras of computing are still applicable in most cases.
Kaspersky, a global cybersecurity company, and the Small and Medium Enterprises Development Agency of Nigeria (SMEDAN) have signed a memorandum of understanding (MoU) to assist small and medium businesses in the country to become more cyber-aware and less vulnerable to developing cyber threats.
The MoU reflects a shared view that SMEs, being the backbone of economy, require strong cybersecurity measures. Kaspersky and SMEDAN will work together on information sharing, training programmes, and other practical steps to raise awareness of digital threats and cybersecurity measures.
“Small and medium business owners are juggling a dozen things – accounting, promotion, legal issues. They are not cybersecurity experts. But they are being targeted by cybercriminals through malware, phishing, and online schemes using social engineering tactics that make them look realistic.
“Our aim is to provide these organisations with some best practice tools and inform about measures that will help them stay safer online,” says Chris Norton, General Manager for Sub-Saharan Africa at Kaspersky.
The cooperation will feed into SMEDAN’s wider SME development efforts, with Kaspersky contributing cybersecurity knowledge and joining forces on awareness campaigns. The idea is to bring cybersecurity-focused guidance into existing business support channels, and to do it in a way that actually makes sense to entrepreneurs who may not have technical teams behind them.
Charles Odii, DG/CEO of SMEDAN, comments: “Since the COVID-19 pandemic, digital adoption among business owners has accelerated significantly. Many now operate WhatsApp shops, use online banking, and send invoices via email, which has increased their exposure to cyber risks.
Together with Kaspersky, we intend to strengthen cybersecurity awareness and practices across Nigeria, helping SMEs protect their businesses as they embrace the digital economy.”
SMEDAN has long been a government agency that has consistently shown up for small business owners in Nigeria. Its work cuts across industries, regions, and stages of growth from traders and artisans to early-stage tech startups trying to get formalised. This partnership gives it another tool to help those businesses operate more securely in a digital world. For Kaspersky, the collaboration is part of a wider push across the continent to support under-resourced sectors that are quietly being targeted online.
Kashifu Inuwa, CCIE, the Director General of the National Information Technology Development Agency (NITDA), has emphasised that integrating intelligence, security, and sustainability is critical to driving Nigeria’s digital transformation and global competitiveness.
Inuwa made the remarks on Tuesday in Kano while delivering a goodwill message at the opening of the 19th International Conference (CONNOVATE 2025) of the Nigerian Computer Society (NCS), themed “Intelligent, Secure, and Sustainable Innovations for a Connected World.”
Represented by Engr. Salisu Kaka, Director of E-Government and Digital Economy Development, Inuwa said the three elements were now indispensable drivers of national progress. He highlighted the need for their convergence to unlock new opportunities in Nigeria’s technology sector, citing Estonia’s X-Road platform — which enables 99% of government services online — as a global model.
“In Nigeria, trust is the ultimate currency in our high-stakes digital environment, where scams and cybercrime are prevalent. Security builds and protects this trust,” Abdullahi said.
He stressed that while security provides the foundation, intelligence builds the structure, pointing to Artificial Intelligence (AI), Machine Learning (ML), and data analytics as tools for addressing Nigeria’s complex challenges. Warning that “innovation without security is unsustainable,” he likened it to “a high-performance race car without brakes.”
The DG urged the next wave of Nigerian startups to go beyond digitising existing processes to creating new value, citing AI-powered wealth management and ML-driven remote diagnostics as examples.
He further highlighted the various Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE) initiatives supporting this vision, including the National Centre for Artificial Intelligence and Robotics (NCAIR), the Computer Emergency Readiness and Response Team (CERRT), the Nigeria Data Protection Act (NDPA) 2023, the national digital identity programme, interoperable payments, and human capital initiatives such as the 3 Million Technical Talent (3MTT) and Digital Literacy for All (DL4ALL) programmes.
Inuwa cited example with International Federation for Information Processing (IFIP) President, Antony Wong, that called for stronger protection and strategic use of data in the Global South to safeguard indigenous knowledge. He stressed the importance of legal clarity on data ownership as Nigeria’s cultural heritage in medicine, ecology, and art is digitised and incorporated into AI systems. Wong praised Nigeria’s role in the recent World Intellectual Property Organization (WIPO) treaty protecting genetic resources and traditional knowledge.
Delivering his welcome address, the NCS President, Dr. Muhammad Sirajo, said the conference would serve as a platform for IT professionals to address critical issues, including intelligent systems, fintech, sustainable energy, and innovations in agriculture, health, education, and national planning.
“This conference will provide an interdisciplinary platform for researchers, practitioners, and educators to present and discuss recent innovations, trends, and solutions for improving technological systems,” Sirajo said.
The week-long event includes plenary sessions, a doctoral consortium, a youth and entrepreneurship forum, the Fellows Forum, the Annual General Meeting, an IT quiz competition for students, and an induction ceremony for new members. It will conclude with the election of new national executives, a dinner, and an awards night honouring contributions to the ICT sector.
The African Development Bank (AfDB) is betting big on Artificial Intelligence (AI) as a catalyst for delivering Africa’s ambitious Agenda 2063.
With hands-on training in tools like ChatGPT and Google Gemini, the Bank believes the results could redefine how the continent plans, measures, and delivers its development goals.
Through its Joint Secretariat Support Office, the AfDB has provided technical and financial support to the 5th annual training workshop for African Union member states, focusing on the use of AI to track and implement the second ten-year plan (2024–2033) of Agenda 2063.
The five-day workshop, held in Lusaka, Zambia, was co-organised by the African Union Commission and the African Capacity Building Foundation.
Participants from across the continent rolled up their sleeves for hands-on training with emerging AI platforms like Ailyse, Google AI Studio, and Perplexity.
The goal of Africa’s multilateral development finance institution is to turn complex development data into actionable insights that can drive smarter decisions, faster interventions, and more accountable governance.
AbibuTamu, lead programme co-ordinator at the AfDB, said AI was now an indispensable tool for Africa’s future.
“These tools are not only revolutionizing how data is collected, analysed, and reported, they are also enabling more targeted policy interventions and efficient resource allocation,” Tamu told delegates.
Agenda 2063, dubbed “The Africa We Want,” is the African Union’s 50-year blueprint for inclusive growth and sustainable development. The second 10-year plan prioritises industrialisation, digital transformation, and sustainable livelihoods.
With AI now in the mix, African policymakers can track progress in real-time, spot bottlenecks before they choke projects, and reallocate resources where they are needed most.
The AfDB’s backing underscores a broader strategy of boosting both human and institutional capacity that propels African states to harness the digital revolution.
Beyond technical skills, the Lusaka workshop doubled as a peer-learning platform, with countries sharing real-world success stories on integrating AI into national planning and reporting.
“If Agenda 2063 is Africa’s long-term roadmap, this AI training is about upgrading the continent’s GPS that ensures leaders not only know the destination, but also have the intelligence to navigate every twist and turn on the way,” said Tamu.
Kaspersky, SMEDAN to Support SMEs in Nigeria with Cybersecurity Knowledge
NGF Launches Digital Platform to Bridge $100bn Infrastructure Gap
TD Africa Secures AI ISO Certifications
Data Is Life: Why MTN Wants You to Get Smarter with Your Data
Paradigm Initiative Equips Prosecutors for the Digital Age of Crime
Telecom2 days agoNCC Claims to Have Eliminated Unregistered SIMs from Telecoms Networks
Telecom2 days agoMTN Group Restructures Executive Team, Appoints Toriola VP for Francophone Africa
Telecom2 days agoAliyu Aboki Applauds Broadband Mapping as About Expanding Opportunity in Africa
E-Financial2 days agoUBA Secures N5Bn BoI Fund to Boost Women Entrepreneurs, Others
- News2 days ago
Telcos See Biggest Growth Post-COVID – ALTON
General News2 days agoVirtual Reality in Healthcare: Nigeria’s Untapped Opportunity for Training, Patient Care, and Medical Innovation
Telecom1 day agoFG Scraps 5 Percent Telecom Excise Duty Under New Tax Law
News2 days agoNITDA, Bauchi State Partner on Digital Literacy and Skills Framework