An ISO’s insider tips to secure your business



South Africa is the third most targeted country in the world for cyber criminals – not necessarily because of the rich pickings, but because of the ease with which wealth can be extracted, says Kevin Halkerd, Information Security Officer (ISO) at fintech company e4, which offers software as a service-driven digital solutions.


Yet even the most advanced and expensive security tools can’t completely protect against all threats. Here, Halkerd gives advice on how security teams can fill some of the most glaring gaps.


  1. Put people first

Cybersecurity might seem like a technological problem, but very often, it’s a people problem, says Halkerd. “People are really the weakest link in the cyber security risk chain. People-related risks are ubiquitous and include social engineering such as phishing, poor password protection and even employees selling their credentials to criminals for money. Creating awareness about these risks and educating the workforce is key, and competent training programmes should form part of your security budget.”


  1. Communication is crucial

Too often, security is viewed as a band-aid – something that needs to be done after a breach. Whereas, of course, security should be in place to prevent a breach. Part of the reason for this mindset is poor communication leading to a lack of cooperation, says Halkerd. “One common example of this is when new methodologies, technology or systems are adopted in a company without consulting IT on the security aspect of it first. Bringing security in as an afterthought leads to vulnerabilities.”


It’s also important that security teams engage with the rest of the workforce, rather than operate as a separate entity, he adds. “Trust is built through face-to-face interaction. If an employee encounters a cyber threat, they should know who they can call and that there is immediate help available to them.”


  1. Spend smarter

Every information security officer knows how challenging budgets can be. Staying on top of the latest trends and risks, and acquiring the right tools to deal with them, costs a lot of money.


It’s time for a mind shift, says Halkerd. “The way business works is to spend the minimum to maximise profits. This sometimes means simply installing an anti-virus programme and firewall – and that’s a dangerous position to take. Business leaders, and security officers in budget negotiations with execs, should reframe this to: What is the most risk the business can be exposed to and still make money? This usually hits home, because now it’s about risk management and risk tolerance. Can your business really afford to go offline for days because your straight-forward anti-virus didn’t do the job? If not, it’s time to rework that budget.”


  1. Delve into data

In South Africa, ease of access to data is an immense problem, says Halkerd. Though the Protection of Personal Information (POPI) Act is taking strides to safeguard personal data, it’s not enough. “Data and information theft is a lucrative business. Criminals often target law firms to get access to property information, for example, because real estate deals can be worth millions. Other data is used to enable insider trading. Our mining industry is under threat because criminals want to steal geographical survey and mineral study data to sell to the highest bidder.”


Companies, he says, need to go beyond POPIA to secure data. “And don’t forget the third-party risk, too. I strongly encourage companies to follow the US National Institute of Standards and Technology’s (NIST) cybersecurity framework, which gives good guidance, and to get all suppliers to adopt it too.”


  1. Do the boring work

While a solid understanding of what security the business needs, and then using the correct tools to keep it secure, is you first line of cyber defence, monitoring those tools is also crucial. “You need comprehensive practices to monitor the effectiveness of your toolsets. It’s not the most exciting work, but it’s essential,” says Halkerd.


Most high-profile breaches that occurred in South Africa over the last few months, he adds, could have been prevented by such monitoring. “Even simple monitoring practices never occurred – password re-use, for example, was prevalent. In other cases, monitoring was limited to one platform or only certain actions.


“Yes, security tools can do the work automatically, but you then must review the results on a weekly, monthly, and quarterly basis. And then adjust the playbook and practice to manage risks as necessary. Regular auditing and testing are vital and require constant vigilance.”

Leave a Comment

Your email address will not be published.

You may also like

Business Economy Finance News

Stakeholders Converge at the Maiden International Financial Inclusion Conference, Lead Conversations on Financial Inclusion





Nigeria, on 24th and 25th November 2022 hosted the largest convening of the global Financial Inclusion ecosystem since the launch of its National Financial Inclusion Strategy in 2012. The 2022 International Financial Inclusion Conference organized by the Central Bank of Nigeria (CBN) and its partners within the financial inclusion governance committees themed: “Financial Inclusion for all: Scaling Innovative Digital Models” had in attendance over 5000 participants from at least 78 countries around the world.

Among the major dignitaries in attendance were His Excellency, President Muhammadu Buhari (GCFR), who was represented by the Honorable Minister of the Federal Capital Territory, Mallam Mohammad Musa Bello (CON); United Nations Secretary-General Special Advocate (UNSGSA) on Inclusive Finance, Queen Maxima of the Netherlands; Secretary to the Government of the Federation, Mr. Boss Mustapha; the Honorable Minister for Communication and Digital Economy, Professor Isa Pantami; the Honorable Minister of Women Affairs, Dame Pauline Tallen; the Honorable…

Read More
Agriculture Business Culture Economy




Federal Government has reiterated its commitment to streamline the existing sorghum varieties in the country to enhance Self-sufficiency, income generation, Food and Nutrition Security amongst others.

The Minister, Federal Ministry of Agriculture and Rural Development, Dr. Mohammad Mahmood Abubakar revealed this while receiving report of the Sorghum Technical Committee, in his office, in Abuja, recently.

He stated that the objective of streamlining the existing sorghum varieties was to find other ways of improving productivity, value addition and quality of sorghum produce, noting that the exercise was crucial as it would enhance farmer’s income, attract more youth to sorghum cultivation, meet national demand as well as contribute to the growth of the Gross Domestic Product.

In his words” This cannot be achieved without the collaborative efforts of all Stakeholders of which farmers, Seed producers, Input providers and international Institutes are part”.

He recalled that the technical committee arose from a sorghum stakeholders meeting on…

Read More
Business Economy

African startups are weathering the funding storm with acquisitions


A new report from Africa’s foremost digital economy consultancy, TechCabal ( Insights has revealed that acquisitions have become more frequent in Africa’s tech ecosystem, showing signs of a maturing market. According to the report, 2021 saw 32 acquisition deals on the continent. At the end of Q3 2022, there were about 43 acquisition deals, signaling a consolidation trend.



After two years of continuous growth in VC investment, funding announcements have hit a plateau. Startups have resorted to cutting costs to extend their runway, and acquisition deals have become necessary for survival, particularly with startups operating in the same market. The number of acquisitions between startups operating in the same market increased from 31% in Q2 to 52% in Q3 2022.


The State of Tech in Africa Report compiled by TechCabal Insights, also found that the average seed ticket size remained stable at $2.5M in…

Read More
Business Economy Society Technology Technology Trends

Multimillion-dollar boost for small business as more African countries join MultiChoice Africa Accelerator Programme


Following the success of the MultiChoice ( Africa Accelerator ( Programme, which secured $16 million (USD) of funding for six emerging businesses last year, the programme has been expanded to eight more countries across Africa.


Many more small businesses in Africa’s technology sector now have the chance to benefit from the 2023 programme, which provides the skills and opportunities needed to attract transformative business funding.

“We’re really excited to be expanding the MultiChoice Africa Accelerator Programme to more African countries,” said Calvo Mawela, MultiChoice Group CEO, announcing the launch. “It’s part of our long-term commitment to growing and multiplying Africa’s technology potential, which is critical to our future growth.”

The MultiChoice Africa Accelerator Programme, which kicked off during Global Entrepreneurship Week,  is aimed at established start-ups and small enterprises in specific technology sectors – healthtech, agritech, fintech, edutech, the circular economy and the creative industries.


Read More
Announcements Business Culture Events Technology Tourism Trends

Spark Africa set to hold the largest tech gathering in Africa; the Africa Technology Expo.



Spark Africa, The African Technology Leader has announced the company’s readiness to host the African Technology Expo, a gathering of tech enthusiasts and stakeholders with the aim of promoting indigenous African talents and innovations.

This was disclosed by the Convener of the event and CEO of Spark Africa, Nnaemeka Clinton, during a Press briefing.

According to him;“Nigeria has over 30 Million People with viable ideas, about 10,000 startups and over 200 of these startups are fintech.

Most tech events in Africa and Nigeria specifically do not solve the issue of helping our unique talents with viable tech ideas translate their ideas to startups.
This isn’t about creating an avenue for motivation and encouraging networking amongst African talents alone, that is good, however, the “working the talk” is by transforming their ideas into startups.
The Africa Technology Expo, the largest tech gathering in Africa is different, this year’s debut edition is aimed at converting over…

Read More
Announcements Business Economy Technology Technology Trends Telecoms




The Nigerian Communications Commission (the Commission), in line with Section 121 of the Nigerian Communications Act 2003 (the Act) has the responsibility to manage and administer Spectrum resources for the communications sector in an efficient and effective manner. This is for the socio-economic benefit of the country.

Accordingly, it is the Commission’s responsibility, as the industry regulator, to ensure that harmonized and standardized Spectrum resources are made available in a timely manner to ensure its optimal utilization. The impact of the Commission’s regulatory activities in this regard is evident in the contribution of ICT, and telecommunications in particular, to the Gross Domestic Product (GDP) of the country.

The Act allows available Spectrum resources to be licensed through different methods. Spectrum licensing via Auction is one of the most transparent methods of assigning Spectrum resources globally. It is important to note that the Commission in response to requests for more Spectrum lots…

Read More
Business Economy News Technology Technology Trends Telecoms

NCC-CSIRT Urges Adoption of Two-Factor Authentication as Somnia Ransomware Targets Telegram Accounts



In response to the discovery of a new attack that compromises victims’ VPN (Virtual Private Network) accounts to compromise messaging app, Telegram, the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has advised users to adopt two-factor authentication to protect their Telegram accounts and to not download unknown Advanced IP Scanner Software.
Ukrainian cyber experts discovered the attack, which uses Vidar Malware (Vidar Stealer) to steal Telegram session data, which in the absence of configured two-factor authentication and a passcode, allows unauthorized access to the victim’s telegram account and corporate account or network.

The malware, which exploits unauthorized access to users’ Telegram accounts and corporate accounts to steal data, targets platforms across iOS, Android, Linux, Mac and Windows Operating Systems.

“The Ukrainian CERT alleged that a Somnia Ransomware was created to be used on Telegram that tricks users to download an installer that mimics ‘Advanced IP Scanner’ software, which contains Vidar…

Read More
Business Economy Energy




– Restates Net Zero Carbon Emission By 2060

President Muhammadu Buhari has declared that his administration attracted over $3bn investment in the Oil and Gas Sector at a time of near-zero appetite for investment in fossil energy.

Speaking Tuesday in Bauchi at the Flag-off Ceremony of the Kolmani Integrated Development Project, a fully integrated in-situ development project comprising upstream production, oil refining, power generation and fertilizer, President Buhari said:

“Considering the land locked location and the huge capital requirement, the economics of the project is a challenging proposition. Consequently, from the outset, I instructed NNPC Limited to utilize and leverage their vast asset portfolio across all corridors of its operations to de-risk the project to attract the much-needed investment.

“It is therefore to the credit of this administration that at a time when there is near zero appetite for investment in fossil energy, coupled with the location challenges, we are able to attract…

Read More