E-Business
Taking Enterprise Security to the Board

It’s that time of year, again, with many companies busying themselves in the art of budgeting and forecasting for 2018.
In some companies, this means the Chief Information Security Officer (CISO) having to communicate the importance of including enterprise security in this planning, using a language that the members of the board will understand.
“For some, this will mean being given a short amount of time to make sure a group of non-technical people understand the company’s business risks and believe that your plan to mitigate them is comprehensive, necessary and worthy of investment,” said Anton Jacobsz, managing director at Networks Unlimited.
“The keyword here is ‘business’ – we have got to translate our on-the-ground security concerns into business terms, risks and outcomes. We’re all very good at listing statistics but the ability to translate this into business outcomes, which is the language your board understands, is what will win the day.
“Your board’s time, attention span and ability to consume ‘geek speak’ is limited, but there are steps you can take to ensure the time you spend with them matters,” Jacobsz explained.
Time for a few home truths
Is your exco one of the many that thinks their organisation is not going to be of interest to cyber criminals? If yes, then it may be time to explain clearly that every single organisation, regardless of size or business focus, is likely to experience a cyber security breach at one point or another. The reason for this is data.
If your business processes payments of any kind, for example salaries or online payments, or if you transmit or store records, or if you’re developing a cure for a dread disease like cancer, then you have information that a hacker can sell.
Ryan Kearney, Executive Vice President of Product Development and Chief Technology Officer of F5 Networks, advised that telling a compelling story about a security breach, preferably in your industry or locale, will help board members understand the risks here.
“Give examples from your own company. Identify critical information assets – intellectual property, sensitive customer data – and paint a picture of what would happen and what it would cost if they were compromised,” he said.
Use statistics to convince, not just frighten
There are ways to move the statistics conversation from one that leaves exco with a feeling of dread to one where they truly understanding the real potential impact to the enterprise.
F5’s Kearney says the following types of statistics could be used to educate and surprise board members:
- 73 percent of companies suffered at least one security breach in the past year.
- About a third of employees targeted for phishing will open fraudulent e-mails.
- More than one in 10 take the bait – and it only takes one.
- Less than two minutes can elapse from the hacker hitting send to your systems being compromised.
- Hackers are inside your organisation, on average, for at least four months before they’re discovered.
- Web apps are the number one entry point for breaches.
“As the C-suite leader in charge of cyber defence, it is up to the CISO to explain the impact of this to the board,” says Jacobsz. “This is the point where you should be talking in terms of tangible and intangible losses, which are sure to resonate with them.”
Tangible costs as a result of security breaches include fines as a result of breaks in customer SLAs, revenue losses due to downtime, compliance/audit fines, potential legal fees and incident response costs, which incorporate unplanned costs for hiring third party breach experts.
Less immediately obvious damage could include issues like the impact a breach could have on your company’s brand; existing and potential customer perception/loss; the loss of your competitive advantage and even the potential for the board’s personal reputation being affected.
Introduce security awareness to the company culture
If you talk of such things around the braai, you might have heard somebody complaining about how their company doesn’t allow Dropbox or Wetransfers – how archaic, right? Wrong, said Jacobsz.
“These policies are enforced because someone, somewhere along the lines, opened a mail, clicked on a Dropbox link and downloaded a file from an unknown, untrusted source resulting in a cyber security breach. But this can be avoided. A secure business is one where everyone is educated about threats and does their part to reduce risk.”
F5’s Kearney agreed, saying it starts with rigorous and repeated training and continues with individual buy in.
Furthermore, as a key participant in creating the company culture at the outset, the board members themselves must also be challenged to champion efforts that have no received budget approval, he said.
“You have done your homework and secured funds for some of your efforts but if you have risk areas that need addressing but have no budget allocation, board members need to know this and either accept the risk or champion a solution. There’s no better way to get something accomplished than by saying the board requested it get done.”
Discuss incident response and cyber insurance
As mentioned earlier, the likelihood of organisations remaining untouched by security breaches is minimal. Being prepared is the best line of defence, and employing the services of a good incident response firm is the first step.
The second is considering options in cyber insurance, which is the fastest growing insurance in the world and is projected to grow by 300 percent from $2.5 billion today in annual premiums by 2020. Here, show your work and do the maths for your board – calculate how much your business can absorb and insure the rest.
“Use your board-facing time wisely,” said Jacobsz.
“Make sure you prioritise and focus on the top cyber risks bringing solutions to the table. Above all, demonstrate your burning issues in small, easy to digest chunks. Do this and you and your boards will soon be singing in harmony and protecting the company at the same time.”
E-Business
FG Mulls Fibre Optic Layout to Bridge Internet Gaps

President Bola Tinubu said that his administration has initiated a project to install fibre optic cables across the country, aimed at enhancing the socio-economic development of Nigeria.
His plans were contained in a speech he delivered at a joint session of the National Assembly in commemoration of Democracy Day on Thursday, June 12.
He said the fibre optic layout is part of other projects being embarked on.
“In addition, we have embarked on an ambitious project to lay fibre optic cables across the nation, a transformative step toward bridging the digital divide and fostering greater connectivity.
“This initiative promises not only to enhance the speed and reliability of internet access but also to revolutionise how businesses operate, how students learn, and how communities stay connected,” Tinubu stated.
He maintained that by extending this critical infrastructure, his government is empowering entrepreneurs, enabling digital education, and providing the tools for our youth to compete in a globalised world.
In a most recent report on Internet connectivity, The ICIR pointed out how Nigeria has faced setbacks in its deployment of fibre optic cables and needs a transformation.
The challenges revolve around vandalism, inadequate coordination between road construction and telecom infrastructure, and varying right-of-way (RoW) charges across states.
Among industry experts, these issues impact network outages, increase repair costs, and hinder broadband expansion efforts.
It has also further threatened the digital economy, leading to slower Internet speeds, dropped calls, and unreliable connectivity among others.
E-Business
African Startups Raised $345m in Funding in May

African startups raised more than $345 million across 65 deals in May, more than double the amount raised in the same period of last year, according to a report by Briter, a research and business intelligence firm.
The report disclosed that both the number of deals and participating companies declined, confirming a growing trend of fewer companies raising funds in larger sizes.
It said fintech attracted the highest share of funding in May, accounting for 34 percent of the total, while cleantech followed closely, driven by a debt deal from Sun King. The company raised $80 million (in local currency) to expand clean energy access in Nigeria.
“Equity remains the primary instrument in terms of total value. There’s no doubt about it; in fact, equity deals with disclosed amounts captured more than half of the total funding volume in May.
“However, debt financing is increasingly proving its weight. Although it accounted for only 8 percent of all deals, it represented 32 percent of the total funding, highlighting the typically larger size of debt transactions. With the rise of specialised vehicles targeting early-stage businesses, debt is becoming an increasingly important part of Africa’s innovation funding landscape,” it said.
Briter’s report added that grants continued to play a vital role in early-stage support, especially in the education technology (EdTech) sector. The Mastercard Foundation led the pack in grant activity, funding a new cohort of EdTech innovators in Nigeria and Kenya. Each selected startup is set to receive $100,000 in grant funding, in addition to mentorship and business development support.
Multilaterals also made a strong showing in May, it said. The Multilateral Investment Guarantee Agency (MIGA), a World Bank Group member, issued a $179.6 million guarantee to CleanTech firm KOKO Networks. The support will help scale its clean energy solutions across Kenya.
“This deal not only demonstrates growing international confidence in African climate ventures but also signals a promising pathway for other asset-intensive startups in clean cooking, agriculture, and renewable energy,” the report said.
From a geographic perspective, Egypt emerged as the continent’s fundraising powerhouse for the month, contributing 51 percent of all funding raised. The country recorded 12 deals across equity, debt, and bond instruments. Notably, FinTech platform MNT-Halan raised $50 million through a bond issuance, further illustrating the diversification of capital-raising mechanisms in the region.
Outside Egypt, funding was distributed across Africa’s three other key markets, which are Egypt, Nigeria, and Kenya, with limited activity recorded in countries such as Ghana, Tunisia, Morocco, and Uganda, each registering between one and three deals.
In terms of exits, the African tech landscape continues to mature. Three companies—Baobab+, Qardy, and Shopa—were acquired in May, bringing the total number of exits this year to 22. This already surpasses last year’s count for the same period. Qardy was acquired by Catalyst Partners Middle East (CPME) in a disclosed deal valued at $23 million, the report added.
E-Business
Human Hacking: When Cyber Criminals Target You

By Nancy Werteen
When you get anti-hacking advice, you’ve probably heard “Don’t use a simple password,” or “Don’t plug in that USB you found on the ground.”
But there’s one form of hacking that doesn’t always require a computer, and it costs businesses about 4.88 million dollars a year.
Modern hackers aren’t trying to get into your computer; they’re trying to get into you.
“They’ll try to learn about you a little bit, and they’ll try to use that information against you to try to get you to complete some action, maybe to send somebody some money,” said Kevin Moran, PhD, Assistant Professor of Computer Science, Cyber Security and Privacy Cluster, University of Central Florida.
IBM calls this human hacking, because it exploits human error instead of system error.
“With people just being busy and maybe not very carefully checking some of the emails or the phone calls that they get, can be something unfortunately that people can fall victim to,” said Moran.
Also known as social engineering, this often takes the form of phishing, where the hacker tries to “fish” the information out of you by impersonating family, friends, or even your bank.
There’s also baiting, where the hacker baits you with something of value. Remember the Nigerian prince scam?
That’s a famous example of baiting. There’s also pretexting, where the hacker will claim the victim has already been hacked, and that the hacker can fix it if you just send over your passwords. So, what can you do?
“Just as a rule of thumb, instead of clicking on links and emails, just go to the website yourself. And that will prevent, a lot of these types of attacks from happening,” explained Moran.
Phishing can take many forms.
Spear phishing targets people with access to confidential information, often to get access into an entire business, and whale phishing targets CEOs or political figures.
Search engine phishing is when hackers create fake websites promising services or goods you’ll never receive.
Angler phishing is when hackers create fake social media accounts impersonating famous people or companies.
Finally, vishing and smishing is phishing done through phone calls and texts respectively.
- News2 days ago
CDCFIB Warns against Recruitment Racketeers
- Telecom2 days ago
Meta, FMCIDE Unveil AI Accelerator to Drive Innovation in Nigeria
- News2 days ago
FG May Forfeits $4m from World Bank Loan over Audit Flop
- Telecom2 days ago
Nigeria Leads the Charge in Green Innovation @MTN’s Africa PachiPanda Challenge
- Telecom2 days ago
Zinox Technologies Collaborates with FGN for VivaTech Paris 2025
- Broadcasting2 days ago
Afia TV and Radio Stamps Footprints in Lagos
- E-Business1 day ago
African Startups Raised $345m in Funding in May
- E-Financial2 days ago
NDIC Begins Final Settlements to Creditors of Liquidated Premier Bank