Connect with us

E-Business

Suffer a Data Breach; Lose up to One Third of Your Customers

Published

on

Kindly share this post

Astonishing findings from RSA’s recent survey in the UK showed that 28 percent of customers have elected to boycott companies that have been shown to mishandle personal data.

 

RSA is a global cybersecurity leader with consulting and technology solutions that empower firms by providing a holistic view of cybersecurity needs in order to reduce risk and rapidly respond to incidents.

 

“South African businesses should be prepared for similar consumer trends in the near future,” believed Anton Jacobsz, managing director at value-added distributor, Networks Unlimited Africa, which delivers the full range of RSA solutions to the local market.

 

“Consumers are becoming increasingly aware and sensitive about how their service providers use their personal data, and for those organisations that suffer high-profile data breaches, there is a very real possibility that customers will ‘vote with their feet’.”

The RSA survey goes on to reveal that the majority of consumers (57 percent) have no idea how many times their personal data may have been placed at risk, given the flood of headline-grabbing cyber-security breaches over recent months.

 

GDPR and PoPI

While analysts estimate that only about a tenth of all breaches are reported to the public, this is about to change, as the European Union’s General Data Protection Regulations (GDPR) finally kicked in on 25 May.

 

“For businesses operating in the EU, or even for local businesses that provide services to EU citizens, the new laws will ensure that any and all data breaches are disclosed within a 72-hour period,” explained Jacobsz.

 

GDPR is enshrined in European Union law, giving it automatic credence among all member states. It seeks to harmonise data protection regulations throughout the region, placing stringent rules on how organisations gather and use individuals’ personal data, increasing levels of transparency, giving individuals greater control over how their data is used, and ensuring mandatory disclosure of any breaches.

 

Under GDPR, companies could face fines of up to 20 million euros, or four percent of annual turnover, which shows the gravity of the issue for large businesses in particular. In South Africa, the pending arrival of our own incoming legislation, the Protection of Personal Information Act (POPIA), expresses a very similar intent to GDPR. Many legal experts believe that achieving compliance with GDPR should essentially imply compliance with PoPIA, once it is enacted.

 

Staying on the right side of the law

 

So just how can organisations set about ensuring compliance with both PoPI and GDPR?

 

“As a global company, RSA has completed a considerable effort to ensure that it prepares organisations for GDPR – identifying gaps, improving readiness, evaluating risk, meeting compliance and rapidly respond to incidents,” said Jacobsz.

 

“To cater for such broad-reaching compliance requirements, organisations must address cyber-security and data protection at an overall enterprise level,” he adds.

 

“RSA’s approach incorporates both advisory and technology services, addressing the entire lifecycle of solution fulfilment – from strategy and design, to deployment and operations management.”

 

While organisations must comply with new legislation, they also cannot halt progress on key digital programmes and transformation projects. To ensure that their digitisation journeys can proceed safely, RSA takes a business-focused approach to one’s cyber-security strategy, ensuring it is aligned with the company’s strategic objectives.

 

Seven practices to ensure comprehensive defences

 

In a recent white paper, RSA details the seven key practice areas that it has established to provide comprehensive threat mitigation and ensure regulatory compliance:

 

Risk management… Tailoring global best-practices to the unique elements required for the foundation of a firm’s holistic risk management programme, including various assessments and stakeholder mapping exercises.

 

Identity assurance… With identity management at the core of all security programmes (and representing the biggest threat vector), it’s critical to design iron-clad identity management policies and technologies.

 

Advanced cyber-defence practice… Identifying gaps, prioritising risks and designing programmes to improve defences, integrate solutions, provide deep visibility, detect advanced threats and reduce mitigation time.

 

Incident response practice… By combining early detection and rapid response, organisations can close the gap between an initial breach and an attacker being able to carry out their objectives.

 

Professional services… The technology deployment expertise to ensure that organisations gain maximum value from their investments in RSA technology sets.

 

Research… With a heavy emphasis on R&D, the security solutions from RSA continually adapt to the ever-changing threat landscape and keep pace with new legislation (such as GDPR), while training services help customers to enhance overall awareness and optimise their cybersecurity capabilities.

 

Enterprise-wide security programme management… to pull it all together, teams of cybersecurity experts analyse an organisation’s overall threat posture, continually making recommendations to further strengthen one’s security practice.

 

“The risks of data breaches – for both local and international companies – are enormous,” summarised Jacobsz, “ruining an organisation’s reputation, destroying customer trust, and exposing them to heavy regulatory penalties.”


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

NITDA DG Reaffirms FG Commitment to Responsible and Inclusive AI

Published

on

Kindly share this post

The Federal Government of Nigeria has reaffirmed its commitment to building a responsible, inclusive, and sovereign artificial intelligence ecosystem to enable Nigeria to transition from being a passive consumer of AI technologies to an architect and builder of indigenous AI systems.

This was said by the Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa Abdullahi CCIE, while delivering a virtual address at the InnovateAI Conference held in Lagos.

The conference brought together policymakers, technology leaders, innovators, and stakeholders to discuss the future of artificial intelligence and its role in driving Nigeria’s digital economy and national development agenda.

Inuwa outlined Nigeria’s ambition to transition from being a consumer of artificial intelligence technologies to becoming a builder and owner of AI systems that reflect national values and priorities, in line with the National AI Strategy.

“Our goal is not just to use AI, but to architect and build our own AI systems in Nigeria,” he said, stressing that the country must take ownership of its AI future.

He noted that Nigeria’s approach to artificial intelligence extends beyond innovation to include governance, infrastructure, data sovereignty, and policy evolution.

According to him, “Responsible AI is never a finished job; it is an iterative journey. Our policies must evolve as the technology evolves, and we must avoid frozen laws by adopting living policies that adapt over time.”

He cited the implementation of the Digital Economy and E-Governance Bill as a key mechanism for generating insights that will help refine AI regulations and governance frameworks.

Inuwa also highlighted the challenge of data representation in global AI systems, noting that most models are trained on non-African datasets, which often results in bias against local dialects, cultures, and demographics.

“If a model shows bias against a local dialect or demographic, we cannot just patch it. We must reinvest in infrastructure to retrain it with inclusive and representative local datasets,” he stated.

He added that building national AI infrastructure is critical to achieving data sovereignty and ensuring that Nigeria is not merely an end user of foreign AI systems.

He further called for strategic partnerships with global technology companies and hyperscalers to build AI infrastructure in Nigeria while aligning with local values and national priorities.

“The world today is a global village. We need to work with global players, but they must understand our local nuances and help us build the infrastructure to retrain and develop AI models that reflect our context,” he said.

The NITDA Director General explained that adopting a comprehensive AI lifecycle approach, from responsible data collection and governance to deployment and continuous feedback, will enable Nigeria to move from reacting to AI developments to proactively designing indigenous AI systems.

“Without understanding how AI models are trained, how decisions are made, and how models are retrained, it will be difficult to build a responsible and trustworthy AI system,” he warned.

He reaffirmed that the Federal Government is intentional about promoting responsible AI and is working closely with the technology ecosystem to co-design national AI guardrails. He described platforms such as the InnovateAI Conference and other national AI dialogues as critical to shaping Nigeria’s AI future.


Kindly share this post
Continue Reading

E-Business

Mutual Benefits Assurance Settles ₦5.9bn Claims in January 2026

Published

on

Kindly share this post

Mutual Benefits Assurance, a leading Nigerian insurance company, has paid a total of ₦5,937,665,353.57 in claims to policyholders in January 2026 alone, underlining its strong financial capacity and unwavering commitment to prompt claims settlement.

Mutual Benefits Assurance Settles ₦5.9bn Claims in January 2026

Mutual Benefits Assurance

A breakdown of the figures shows that ₦3,426,602,834.28 was paid under its General (Non-Life) Insurance portfolio, while ₦2,511,062,519.29 was paid across its Life businesses, including Group Life and Retail Life policies.

The significant payout within a single month reinforces Mutual Benefits’ reputation as a dependable insurer that honors its obligations swiftly and responsibly.

Commenting on the development, Olufemi Asenuga, Managing Director, Mutual Benefits Assurance Plc stated that claims settlement remains the core promise of insurance and the ultimate test of an insurer’s credibility.

“Insurance is built on trust. Our ability to settle over ₦5.9 billion in claims in one month demonstrates not only our financial strength, but also our deep commitment to our policyholders. At Mutual Benefits, we do not just sell policies. We stand by our promises,” he said.

With over three decades of operations, Mutual Benefits has consistently positioned itself as a strong and well-capitalised insurer.

The company operates both Life and General Insurance businesses and remains fully compliant with regulatory capital requirements as stipulated by the National Insurance Commission (NAICOM).

The January payout reflects Mutual Benefit’s robust underwriting standards, prudent risk management practices and efficient claims administration framework.

It also aligns with the company’s broader record of substantial claims settlement in recent years, reinforcing its standing as a trusted brand in the Nigerian insurance industry.

Mutual Benefits employs over 5,000 staff, managed by seasoned management team and an experienced Board of Directors. Industry observers note that prompt claims payment remains one of the most critical differentiators in Nigeria’s competitive insurance landscape.

By consistently settling valid claims without delay, Mutual Benefits continues to strengthen customer confidence, deepen market trust and expand its footprint across retail and corporate segments.

As the company begins 2026 on a strong footing, it reiterates its commitment to innovation, service excellence and delivering value to policyholders and stakeholders alike. Mutual Benefits Assurance focused on its mission to provide reliable risk protection solutions while maintaining the highest standards of professionalism and integrity.


Kindly share this post
Continue Reading

E-Business

NITDA Warns Nigerians of Actively Exploited Microsoft Office Vulnerability

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) has issued an urgent cybersecurity warning about a serious Microsoft Office vulnerability (CVE-2026-21509) that attackers are actively exploiting.

NITDA Warns Nigerians of Actively Exploited Microsoft Office Vulnerability

This advisory, shared through Nigeria’s Computer Emergency Response Team (CERRT.NG), highlights the risks of this flaw and recommends immediate action to protect systems.

Microsoft has released quick security updates to fix this vulnerability, which has a severity score of 7.8, showing it is a serious risk. Attackers have already used it in targeted attacks.

CVE-2026-21509 affects multiple versions of Microsoft Office, including Office 2016, Office 2019, Microsoft 365 Apps, Office 2021, and later versions.

This flaw allows attackers to bypass security features meant to stop harmful Object Linking and Embedding (OLE) controls. OLE is an older Microsoft technology that can be used to embed links or content, but it has often been exploited by malware.

By exploiting this flaw, attackers can create specially designed Office documents.

When a user opens these documents, they can run malicious code or gain further access to the system.

Exploitation requires user interaction, meaning attackers often trick people into opening harmful Word, Excel, or other Office documents. Common methods include using email attachments or files from untrusted sources.

Because Microsoft confirmed that the vulnerability is being actively exploited, they have made emergency security updates available outside their usual schedule. Users and organisations should:

  1. Install the latest Microsoft Office security updates for all affected versions.
  2. Restart Office applications for Office 2021 and later to ensure that the updates take effect.
  3. Use registry-based settings for protection if updates can’t be applied right away.
  4. Follow good cybersecurity practices, like using endpoint protection and filtering emails.

Microsoft’s updates for Office 2021 and newer versions are automatically applied, but need a restart of the applications to be active.


Kindly share this post
Continue Reading

Trending