Contextualising cybersecurity readiness in South Africa

Abstract

The expansion of the information society has brought with it a revolution in the use of Information Communication Technology (ICT). In South Africa, the adoption of various digital devices and technologies has introduced conveniences but at the same time it also opens up the door for various cybercrime attackers. This digital paradox demonstrates that ICT has tremendous capabilities for the rapid provision of services but at the same time can be exploited by malicious cybercriminals. It is vital that organisations and individuals not overlook the strong imperative for cybersecurity. In an interconnected world, cybersecurity and cybercrime go hand in hand. With cyber-attacks and data breaches are on the rise organisations need to be constantly adapting their security measures and preparing for cyber threats. At the end of 2017, a survey was carried out on the state of cyber readiness levels across various sectors in South Africa. The aim of the survey was to identify the current security posture in organisations and ascertain where the gaps were in order to respond to developing cyber threats. Cybersecurity needs to be viewed from various dimensions and thus the survey focused on the status of cybersecurity plans, strategies, governance, standards, Computer Security Incident Response Team (CSIRT) membership, awareness programs, vulnerability and risk assessments as well as incident management capabilities. This paper presents the results of the survey which are further analysed in order to contextualise critical findings and recommendations. The survey provided important insights into cyber readiness in South Africa. In this paper the results are placed in context of global trends in order to determine key areas that require attention. It is important to identify how organisations in South Africa should be dealing with disaster recovery planning and how to remain operational when faced with system interruptions and interferences. Contextualising the cyber readiness levels helps asses the latest threat landscape, as well as develop strategies to mitigate these cyber risks.