Cyber Risk – the Achilles heel for SMEs

Zamani Ngidi, Principal Cyber Risk Consultant at Aon South Africa

Many small and medium businesses assume that they are not likely targets for a cyberattack, believing that only large corporates, banks and government institutions appeal to cyber criminals. As a result, their security measures are typically nowhere near the levels needed to avert a focused cyber hack, making them easy pickings for a cyber breach.

According to Zamani Ngidi, Principal Cyber Risk Consultant at Aon South Africa, the number of companies  claiming for cyber-related insurance losses has doubled since 2015.  Consider these fast facts:

  • 43% of cyber-attacks target small businesses according to the Verizon 2019 Data Breach Investigations Report (DBIR). The report analysed 41,686 security incidents. SMEs were by far the greatest percentage of all attacks with the next closest being the public sector at 16%, and financial institutions at 10%.
  • The Verizon report also showed that 71% of attacks were financially motivated, and 25% of breaches were motivated by the gain of strategic advantage (espionage/theft of IP). 29% of these breaches involved the use of stolen credentials.  Even more disconcerting is the fact that 56% of all breaches took months or longer to discover, all the while cyber criminals had access to confidential data and business IP.
  • Malware attacks in SA increased by 22% in the first quarter of 2019 compared to the first quarter of 2018, translating to around 13 842 attempted cyberattacks every day according to Kaspersky Lab.

“Whether a large of small business, a cyber breach has the potential to inflict enormous reputational damage, cause major interruption to normal business operations and income potential, and can also have legal ramifications if personal and financial information is compromised in context of the Consumer Protection Act (CPA), the Electronic Communications and Transactions Act (ECT) and the Protection of Personal Information Act (POPI),” he warns.  And the attacks on South African organisations of all sizes and industry sectors show no signs of abating, as the recent ransomware take down of the City of Joburg’s prepaid electricity system demonstrates.

“South Africa will also continue to see large-scale ransomware attacks that target administration credentials to gain access to and infect, wider networks – often targeting SMEs and contractors to gain access to larger client corporations. With the expected increase in ransomware attacks designed to spread through a network, organisations of all sizes and industry sectors urgently need to take steps to protect their networks, and ensure that their risk management and insurance programmes are fit for purpose to protect them in a worst case scenario,” urges Zamani.

The following checklist from Aon provides an indication on how risk ready your organisation is to face a cyber security event:

  • When was the last time you reviewed your company’s patch management program? Your disaster recovery and business continuity plans?
  • Can you identify where all of your mission critical data resides and whether regular backups are being made?
  • Does your cyber insurance policy provide adequate coverage? Have you taken the necessary steps to ensure you will be eligible to make a claim if your company is impacted?
  • Have you communicated with employees about the latest phishing and social engineering techniques?
  • Do you have an incident response plan in place, and has it recently been tested so everyone knows what to do in the event of an attack?
  • Are all necessary technical and procedural controls in place and operating properly?
  • Has your security posture recently been assessed, tested and acted upon?

“There is simply no one-size-fits-all approach to cyber risk and insurance,” says Zamani.  “It all depends on the size of the company, nature of its business and its unique levels of exposure.  In this regard, consulting with a professional risk advisor is an invaluable exercise in assessing your exposures, developing a risk mitigation strategy and transferring that risk to an insurer in order to protect your reputation, data, clients and bottom line,” concludes Zamani.

 

 



Latest


21 Sep 2020
Women are lagging in retirement savings and are debilitated by stress

In a recent study of their client base, Momentum Corporate revealed that almost half (41%) of the employees on the…

Women are lagging in retirement savings and are debilitated by stress

In a recent study of their client base, Momentum Corporate revealed that almost half (41%) of the employees on the FundsAtWork Umbrella Funds are women. With an almost 50/50 gender split across the client base, a one-size-fits-all approach to advice on employee benefits simply won’t cut it. This is according…

15 Sep 2020
Despite COVID-19, SA investors expect higher future returns

Even as COVID-19 halted the longest economic expansion on record and plunged the world into deep recession, South African investors…

Despite COVID-19, SA investors expect higher future returns

Even as COVID-19 halted the longest economic expansion on record and plunged the world into deep recession, South African investors expect to make an average annual total return of 12.67% – almost 2% higher than the global average predicted returns of 10.9%. This was revealed in the recently released Schroders’…

15 Sep 2020
Are cryptocurrencies here to stay?

The recent news that cryptocurrency giant, Digital Currency Group, has acquired cryptocurrency exchange company, Luno, has once again highlighted the…

Are cryptocurrencies here to stay?

The recent news that cryptocurrency giant, Digital Currency Group, has acquired cryptocurrency exchange company, Luno, has once again highlighted the rise of cryptocurrencies as a possible alternative to the current global financial system. According to Old Mutual Investment Group Director of Investments, Hywel George, Bitcoin, as well as a number…

10 Sep 2020
How too much choice is draining your brain

By: Paul Nixon, head of technical marketing and behavioural finance at Momentum Investments From the words of Francis Scott Key…

How too much choice is draining your brain

By: Paul Nixon, head of technical marketing and behavioural finance at Momentum Investments From the words of Francis Scott Key that dubbed America “The land of the free”, which stuck, to the unforgettable Mel Gibson monologue where an army of painted Scots were willing to trade their lives for the…


Top stories


10 Apr 2020
When the going gets tough, farmers are on familiar territory

South African farmers are old hands at adapting to uncertain and daunting circumstances, and our local agricultural industry has proved…

When the going gets tough, farmers are on familiar territory

South African farmers are old hands at adapting to uncertain and daunting circumstances, and our local agricultural industry has proved to be most enterprising in acclimatising to challenges as they arise.

13 Apr 2020
Investors should keep a reasonable investment allocation outside of SA

MoneyMarketing asked Roland Gräbe, the head of Tailored Fund Portfolios at Old Mutual Wealth, about offshore investments in the COVID-19…

Investors should keep a reasonable investment allocation outside of SA

MoneyMarketing asked Roland Gräbe, the head of Tailored Fund Portfolios at Old Mutual Wealth, about offshore investments in the COVID-19 environment and what form a global market recovery will take.

13 Apr 2020
SA’s Proposed Covid-19 Disaster Management Tax Relief

The National Treasury recently issued the draft Disaster Management Tax Relief Bill (Bill) for public comment by 15 April. The…

SA’s Proposed Covid-19 Disaster Management Tax Relief

The National Treasury recently issued the draft Disaster Management Tax Relief Bill (Bill) for public comment by 15 April. The draft Bill, together with its explanatory memorandum, provides clarity with regards the tax relief measures President Cyril Ramaphosa announced on 23 March.

11 Apr 2020
Finding investment opportunities among the many COVID-19 risks

With many countries around the world in lockdown as they try to contain the spread of the COVID-19 virus, the…

Finding investment opportunities among the many COVID-19 risks

With many countries around the world in lockdown as they try to contain the spread of the COVID-19 virus, the global economy is facing an unprecedented situation of balancing health against financial livelihoods.


Visit the official COVID-19 government website to stay informed: sacoronavirus.co.za