Curbing the chaos of cybersecurity one step at a time
What does a hacker look like? If we listen to Hollywood – and literature, and the small screen – then he’s (for these figures are invariably male) late teens/early twenties, wronged by corporate giants and greedy multinationals (or else simply trying to channel genius), probably wearing a dark hoody and sitting at home, operating independently.
While this may be an accurate description of some hackers, today the real cybersecurity threat is more sophisticated, more diverse and more ubiquitous. Hollywood’s portrait of cybercrime victims is equally inaccurate. We’re fed images of big business in the US and Europe running blindly with a target on its back, but in fact firms of all shapes and sizes, operating in every region in the world are equally affected – and Africa is no exception.
Communication infrastructure in parts of Africa may not be as wide-spread as in other regions, which potentially lowers the risk of cybercrime, but a less mature infrastructure can also mean less experience in dealing with breaches and a lower commitment to cybersecurity. A 2017 report found that 95% of African organisations are operating on or below the ‘security poverty line’; the point at which a company can effectively protect itself against cybercrime. Most of the aforementioned organisations spend a maximum of $1,500 a year on cybersecurity. This is in the context of an estimated $573 million annual cost of cybercrime to the South African economy; $500 million to the Nigerian economy, and $36 million to that in Kenya.
The report found that African SMEs operating in the financial services sector – including micro-finance institutions and fintech providers – are most vulnerable to cybercrime. These are the kinds of organisations which manage and are responsible for vast volumes of sensitive, financial data – exactly the kind of information which should be most heavily protected from risk.
The chaos of cybersecurity is an inescapable part of doing business today; in South Africa, which is relatively mature in terms of cyber security, 73% of adults have reported experiencing cybercrime. Media scaremongering has added to the hype – and hyperbole – around the issue. While this does raise awareness of the risks to business and individuals, it also portrays an ‘us vs them’, ‘hunter and prey’ mentality, in which we are helpless victims of an unstoppable force. This is not a productive approach to take. Businesses must acknowledge the prevalence of cybercrime, but rather than sit idly back, must prepare, educate and take action.
If we don’t know what a hacker looks like how can we select the best means of defence? First, business-owners – and employees – must shift their mindset. The threat is not a single, shady entity – a hunter – but a diverse, ever-changing landscape which we cannot always predict. Rather than running from a hunter, we must ‘run with the bulls’, acquire knowledge, develop skill, build partnerships and be ready to change direction and adapt our path to overcome (inevitable) cybersecurity issues.
Whilst we can’t predict how, when, or where an attack will take place, it is still sensible to identify weak spots that make a company more vulnerable and take basic steps to reduce the risk. Based on this premise global spending on IT security is on the rise; Gartner predicted that MENA spending on information security technology and services would hit $1.8 billion last year, an increase of 11% over 2016.
Investment in expertise and cybersecurity solutions will only go so far though. As a result of digital transformation, technology and cybersecurity concerns are no longer the remit of IT departments. Instead, the majority of a business’s systems, interactions, operations and processes are dependent on technology. This requires a robust, holistic approach: defence-in-depth at endpoint, network, cloud and gateway layers, plus vulnerability scanning and management, 2FA on user accounts, firewalls, intrusion detection and protection and deception.
A comprehensive, company-wide approach to cybersecurity knowledge is a must and probably the best place to start. Everyone from C-level down to the most junior employee must be trained in cybersecurity awareness, the specific risks they face (such as email phishing scams), the consequences of an attack, and of their responsibilities in preventing or acting upon these threats.
Responsibility also lies at the door of policymakers and governing bodies, which must regularly review cybersecurity threats and update legislation accordingly. This will help to place countries across the African continent on par with those other areas, such as the EU.
Running from the ‘hunter’ will get you nowhere. Instead, businesses must accept the chaotic, random nature of cyber-attacks and adapt to suit this new reality. Cybersecurity strategies must involve systems and solutions as much as they do employees and education, allowing business owners to calmly, effectively, and proactively prepare and protect their assets.
Charl van der Walt is the Chief Security Strategy Officer at SecureData
GfK and VMware: Innovating together on hybrid cloud
GfK has been the global leader in data and analytics for more than 85 years, supplying its clients with optimised decision inputs.
In its capacity as a strategic and technical partner, VMware has been walking GfK along its digital transformation path for over a decade.
“We are a demanding and singularly dynamic customer, which is why a close partnership with VMware is integral to the success of everyone involved,” said Joerg Hesselink, Global Head of Infrastructure, GfK IT Services.
Four years ago, the Nuremberg-based researcher expanded its on-premises infrastructure by introducing VMware vRealize Automation. In doing so, it laid a solid foundation, resulting in a self-service hybrid-cloud environment.
By expanding on the basis of VMware Cloud on AWS and VMware Cloud Foundation with vRealize Cloud Management, GfK has given itself a secure infrastructure and reliable operations by efficiently operating processes, policies, people and tools in both private and public cloud environments.
One important step for GfK involved migrating from multiple cloud providers to just a single one. The team chose VMware.
“VMware is the market leader for on-premises virtualisation and hybrid-cloud solutions, so it was only logical to tackle the next project for the future together,” says Hesselink.
Migration to the VMware-based environment was integrated into existing hardware simply and smoothly in April 2020. Going forward, GfK’s new hybrid cloud model will establish a harmonised core system complete with VMware Cloud on AWS, VMware Cloud Foundation with vRealize Cloud Management and a volume rising from an initial 500 VMs to a total of 4,000 VMs.
“We are modernising, protecting and scaling our applications with the world’s leading hybrid cloud solution: VMware Cloud on AWS, following VMware on Google Cloud Platform,” adds Hesselink.
The hybrid cloud-based infrastructure also empowers GfK to respond to new and future projects with astonishing agility: Resources can now be shifted quickly and easily from the private to the public cloud – without modifying the nature of interaction with the environment.
The gfknewron project is a good example – the company’s latest AI-powered product is based exclusively on public cloud technology. The consistency guaranteed by VMware Cloud on AWS eases the burden on both regular staff and the IT team. Better still, since the teams are already familiar with the VMware environment, the learning curve for upskilling is short.
One very important factor for the GfK was that VMware Cloud on AWS constituted an investment in future-proof technology that will stay relevant.
“The new cloud-based infrastructure comprising VMware Cloud on AWS and VMware Cloud Foundation forges a successful link between on-premises and cloud-based solutions,” says Hesselink. “That in turn enables GfK to efficiently develop its own modern applications and solutions.
“In market research, everything is data-driven. So, we need the best technological basis to efficiently process large volumes of data and consistently distill them into logical insights that genuinely benefit the client.
“We transform data and information into actionable knowledge that serves as a sustainable driver of business growth. VMware Cloud on AWS is an investment in a platform that helps us be well prepared for whatever the future may hold.”