Cybersecurity awareness is no longer a generic exercise for business
March 2023
IT in Manufacturing
By Simeon Tassev, MD and QSA at Galix.
Simeon Tassev.
Ransomware and phishing remain the top two cyberthreats today, a fact that many different studies will attest to, and often human error is to blame for successful breaches. Cybersecurity awareness training has become essential for business, but it is often an exercise that is not given sufficient attention because the liability for a breach has been limited. However, recently a new precedent has been set, with ENSafrica being ordered to pay R5,5 million and legal fees to an individual who lost money due to a manipulated email from the firm. As cybercrime incidents continue to rise, ignorance can no longer be used as a valid excuse, and businesses need to implement specific, tailored and effective cybersecurity awareness training to safeguard themselves in the future.
The ENSafrica case
In the case of ENSafrica, a leading law firm in South Africa, the High Court found the firm liable for money which was stolen as a result of manipulated emails showing incorrect banking details. This is a very common scam known as business email compromise (BEC) and in the past, these types of cases generally held limited liability for business. However, with the judge finding in favour of the plaintiff, awarding the law firm to pay her the R5,5 million plus interest and legal fees, a new precedent has been set.
The plaintiff’s argument centred on the fact that ENSafrica owed her a duty of care, and a legal responsibility to warn her of the dangers of BEC, and that they should have made use of secure channels to send banking details, rather than unencrypted channels and unsecured PDFs. It also emerged during the trial that cybersecurity training was inadequate at the firm, despite the growing threat landscape. Essentially, the plaintiff won the case because the firm had neither the right policies nor procedures in place. This highlights the need for greater awareness and training on cybersecurity for business.
Ignorance is not an excuse
The entire case comes down to the fact that all reputable companies should know and do better. The false belief that breaches of this nature are not a business’ problem has now been shaken, because there is a legal precedent showing that they are. In today’s threat landscape, especially with the implementation of the Protection of Personal Information Act (PoPIA), privileged communication should always be protected and encrypted, and awareness of the risks and how to mitigate them needs to become a priority.
This also cannot be a generic exercise, because there are specific potential risks and scenarios that will apply to different businesses. An individualised risk assessment is essential, as is developing a playbook on how to deal with potential threats. Knowing the risks, planning the response, and having processes in place to deal with threats is imperative.
Perks of expert assistance
Knowing and planning are not enough unless all staff are also aware of and trained on the risks and the procedures to follow. This is not just about phishing scams anymore – training needs to be focused and relevant and put into context, so that people can understand real-world examples and consequences of a cyber breach. In addition, businesses need to perform simulations and penetration testing to see whether or not their approach is working.
This is typically not a core skill for most businesses, which is where an expert outsourced provider can assist. A cybersecurity expert can assess risk, compile a complete training plan covering all components, and implement measurements to test these, and tailor training to individuals depending on their role and risk.
With cybercrime continually on the rise, and businesses now being potentially liable for the financial losses of clients as a result of breaches, the importance of cybersecurity awareness has never been more evident. A focused, specific and effective approach is essential in ensuring organisations play their part in protecting against cyberattacks.
Further reading:
Overcoming the bottling industry’s fragmented visibility
Schneider Electric South Africa
IT in Manufacturing Electrical Power & Protection
Beverage bottling facilities are among manufacturing’s most energy-intensive environments, yet many still operate without granular insight into where that energy goes. Rezolia Muller-Potluri of Schneider Electric explains how tiered metering architecture and advanced
Read more...
Advancing intelligent apparel manufacturing with industrial AI and humanoid robotics
IT in Manufacturing
Jack Technology, a global maker of industrial sewing equipment, has chosen Siemens software and engineering tools to bring artificial intelligence and humanoid robots into apparel production, aiming to shorten development cycles and lift manufacturing efficiency.
Read more...
New chiller line for high-density AI data centres
Schneider Electric South Africa
IT in Manufacturing
Schneider Electric has launched the Uniflair XCA, a new series of air-cooled and free-cooling chillers designed for artificial intelligence-driven, high-density liquid-cooled data centres.
Read more...
Turning system integrators into trusted technology partners
Schneider Electric South Africa
IT in Manufacturing System Integration & Control Systems Design
Schneider Electric’s Alliance Partner Programme is repositioning system integrators from hardware suppliers into lifecycle-value partners. Oriel Soupen explains the competency framework, certification model and real-world results that are already helping African system integrators win higher-value, longer-term engagements.
Read more...
Why renewable projects need integrated protection and control
IT in Manufacturing
Fragmented secondary plant integration in renewable energy projects causes costly delays during commissioning. ACTOM Protection and Control’s Secondary Plant Integration solution consolidates all secondary systems under a single engineering framework, reducing risk and accelerating grid
Read more...
When digital twins move from concept to critical tool
IT in Manufacturing System Integration & Control Systems Design Maintenance, Test & Measurement, Calibration
Digital twins are moving out of the lab and onto the mine, the factory floor and the transport network where they predict failures before they happen. Amritesh Anand looks at where they earn their keep, the data and integration work behind them, and the security questions every organisation should ask before switching one on.
Read more...
How a digital foundation can overcome the LNG trilemma
Schneider Electric South Africa
IT in Manufacturing SCADA/HMI
The LNG sector is racing to add capacity, but without a digital backbone, growth creates complexity rather than capability. Christophe Begat of Schneider Electric explains how connecting data, systems and analytics across the LNG value chain can resolve the trilemma of secure supply, lower emissions and tighter costs.
Read more...
Decarbonisation is reshaping mining strategy in Africa
Schneider Electric South Africa
IT in Manufacturing Electrical Power & Protection
Mining companies across Africa are embedding decarbonisation into operational strategy, driven by investor, regulatory and customer pressure to reduce emissions while improving resilience.
Read more...
Siemens and HighByte partner to scale industrial AI
Siemens South Africa
IT in Manufacturing Fieldbus & Industrial Networking
Siemens is expanding its Industrial Edge ecosystem through a partnership with HighByte, enabling customers to connect, contextualise and transform data from operational technology and information technology sources to build AI models and applications at scale.
Read more...
Africa on the edge of a digital future
Schneider Electric South Africa
IT in Manufacturing
Edge computing promises lower latency, stronger reliability and real-time responsiveness across Africa, yet its rollout keeps colliding with one stubborn obstacle, power. Steven Santini explores how renewable microgrids, smart energy management and the right partnerships could turn the continent’s energy gap into its biggest edge opportunity.
Read more...
printer friendly version