Cyber security: Professor Herman Singh
Posted on 6 September 2021 by Herman Singh
Emerging Market Business

Cyber security: a critical risk that’s only set to get worse

The Transnet cyber-attack should sound a warning bell to vulnerable State Owned Enterprises and private sector firms that have been slow to beef up their cyber security systems. The alarming rise in ransomware attacks means many are only one click away from disaster.

Risk managers in South Africa must suffer perpetual headaches these days. There is a crammed list of risk management priorities to constantly monitor: variable water and electricity supply, physical crime, bribery and corruption, climate change, political instability, civil unrest – the list goes on. The recent hack at Transnet is an alarming reminder of how cyber security has elbowed its way near the top of the list; and given our ever-growing reliance on technology, it’s one that’s not going anywhere. 

Ransomware attacks are the fastest growing form of cybercrime, where malicious software infiltrates a computer or network and seeks to limit or restrict access to critical data by encrypting files – effectively locking them – until a ransom is paid. One happens every eleven seconds globally – roughly each time you finish reading one of these paragraphs – and the average downtime after an attack is 21 days, although this depends on whether the ransom is paid or not (much maligned in public, but routinely paid in private). As with all forms of attack, these efforts range on a spectrum of sophistication: from blunt brute force to highly complex and carefully orchestrated. 

This is not a uniquely South African problem by any means, but it does raise the question: how vulnerable is South Africa to cyber-attacks? 

A tale of two securities

Criminal syndicates generally target big fish to secure sizeable ransom payments. In South Africa, this includes large, listed companies and state-owned enterprises (SOEs), like Transnet. The former tend to be professionally managed, with risk committees now routinely addressing cyber security risks, and regularly adopting best of breed mitigations, such as a special focus on managed services, vulnerability assessments, and contingency plans. 

SOEs are another matter. Like their pitiful performance track record, the precautionary measures they implement are less than reassuring. In many cases, systems are poorly designed and managed, skills levels and capacity are low, and motivation for management in this space is a constant challenge. They are generally reliant on archaic systems and security practices, and what makes matters worse is that most SOEs are serviced by the same supplier – the State Information Technology Agency (SITA) – marking a potentially dangerous single point of failure. Moreover, SITA has been experiencing a number of very public operational challenges over the years, effectively holding up a sign to attackers saying: “We are vulnerable”. 

With greater reliance on digital transactions, the risks associated with a cyber-attack, for both listed companies and SOEs, couldn’t be higher. An attack can result in the loss of data and access to processes integral to businesses operations; stolen intellectual property and trade secrets; reputational damage; and substantial financial losses. But South African businesses need to see the threat along two dimensions: first, the threat to their own data integrity and business functions; and, second, even if they can confidently rely on their own cyber security, they remain vulnerable to the potential logistical disruptions of SOEs being compromised, as the cyber-attack at Transnet painfully revealed. 

In this particular attack, Transnet’s Port Terminals Division ended up declaring force majeure at South Africa’s major port terminals, including Durban, Ngqura, Gqeberha and Cape Town. The Durban port alone handles more than half of the nation’s container shipments. Major players, from logistics, to exporters and retailers, came forward highlighting disruptions to their industries lasting several days, which will deliver substantial blows to the already struggling economy.

The Transnet cyber-attack draws attention to the other vulnerable strategic points in our country. One shudders to think of the potential impact of a major attack on Eskom – affecting our already pressured electricity supply; or to our oil and gas pipelines and refineries. The recent attack by Darkside on the Colonial pipelines in the United States, resulted in areas of the US rationing fuel, and some fuel stations running dry. An attack on SARS could cripple our public finances; should telecommunication towers be targeted, it would cut channels connecting colleagues and loved ones; and, anything disrupting air traffic control systems could have horrifying consequences. 

Best precautions are often simple

The average cost of a ransomware attack has increased from $5000 in 2018 to $200 000 in 2021, and a recent survey from Varonis suggests 37% of all firms have been victims of a ransomware attack at some point. COVID-19 has only exacerbated this as attackers take advantage of sectors in crisis – according to one measure, malicious emails are up 600% since the start of the pandemic. Threats to cyber security are now a factor of life; we need to learn to live with, but mitigate, the risk. 

This best precautions are often surprisingly simple: limiting access rights to only those people absolutely required; implementing observability tools for constant monitoring; backing up data as often as possible; closely monitoring remote access; avoiding single points of failure that can compromise an entire system; and, reviewing the naming of key systems and files to make the job of potential hackers that little bit more difficult – naming a folder “Important files” is just asking for trouble. 

Cyber security has been important for decades, but over the last few years it has quickly moved from the wings to centre stage. Businesses, organisations and governments will now have to invest more resources in it, including time. As our world becomes ever more intertwined with technology, the importance of managing this risk is pushing it up the long list of management priorities – ignore it at your peril.

 Professor Herman Singh is an adjunct professor at the University of Cape Town Graduate School of Business and the CEO of Future Advisory, an international firm specialising in digital transformation projects in corporates and start-up acceleration.

This article was originally published in The Conversation.


MORE ON Emerging Market Business

Sharron McPherson Promises and Perils of Africa's
Emerging Market Business

The promises and perils of Africa's digital revolution

Exponential digital advancement across Africa, spurred on by the COVID-19 crisis, is indeed a game changer. But its impact – the good and the bad – requires a more nuanced and intelligent analysis if we really are to build back better.

Read Article
Posted on 15 September 2021 by Sharron McPherson
Ralph Hamann
Emerging Market Business

Is the business community making environmental sustainability a priority in the wake of the pandemic?

National Environmental Awareness month is celebrated in June. We asked UCT GSB Prof Ralph Hamann to share his views on the role of business schools in addressing climate change, and whether COVID-19 has caused the business world to reprioritise environmental sustainability.

Read Article
Posted on 7 July 2021 by Ralph Hamann
Steven Kuo - Why AfCFTA
Emerging Market Business

Why AfCFTA will not put Africa at odds with China

While many worry the newly-launched African Continental Free Trade Area (AfCFTA) may harm Africa-China relations, more attention should be given to improving ease of doing business for local and Chinese businesses alike.

Read Article
Posted on 28 June 2021 by UCT GSB Press Office
Anton Eberhard - keeping SA in the dark
Emerging Market Business

Ministers are holding up energy reforms, keeping SA in the dark

A trillian rand needs to be invested in new power in South Africa over the next decade in order to restore energy security. Opening up the electricity sector to massive flows of private investment in generation capacity is now our only option, but key enabling reforms still have to be enacted.

Read Article
Posted on 27 May 2021 by Anton Eberhard
Nicholas Biekpe All eyes on DFIs as Africa
Emerging Market Business

All eyes on DFIs as Africa looks to economic recovery

DFIs can be the catalysts for a stronger and more inclusive continent, but they need to expand their remit to include a focus on SMEs as a key priority.

Read Article
Posted on 14 May 2021 by Nicholas Biekpe
society and economy - MEDIA
Emerging Market Business

SA is running out of time to fix its society and economy

Freedom Day celebrations ring hollow when the vast majority of black people in this country remain economically and socially marginalised. To unlock our future, we must invest in our people — and fast — to build a new culture of innovation, proactiveness, and risk-taking.

Read Article
Posted on 29 April 2021 by UCT GSB Press Office
democracy in SA - MEDIA
Emerging Market Business

Is support for democracy in SA waning?

On 27 April each year South Africans celebrate Freedom Day in commemoration of the first democratic elections in 1994. We asked UCT GSB Professor Thomas Koelble to give us his thoughts on whether support for democracy in the country is waning, and how this system is being affected by globalisation.

Read Article
Posted on 27 April 2021 by Thomas Koelble
Emerging Market Business

Social justice in South Africa is as much business’ crisis as it is government’s

Busisiwe Mavuso (CEO at Business Leadership SA) was the speaker at the quarterly Allan Gray Speaker Series event, hosted virtually by the UCT GSB in March. We asked Professor Kurt April, who led the discussion, to share some of the key takeouts.

Read Article
Posted on 29 March 2021 by UCT GSB Press Office
MEDIA - 345X345
Emerging Market Business

Vaccine roll-out woes put spotlight back on Africa’s power crisis

As African countries scramble to acquire and roll-out vaccines across the continent, the urgent need for reliable energy supply is once again in the spotlight.

Read Article
Posted on 18 March 2021 by Wikus Kruger
Health Kathusa  - media
Emerging Market Business

COVID-19 vaccination is the social justice challenge of our time

The first COVID-19 vaccines have arrived in South Africa amid much fanfare — drowning out the voices of those asking why we are paying double for them in the first place and why they are unlikely to help those who need them most.

Read Article
Posted on 4 February 2021 by Katusha De Villiers
SA film industry - media
Emerging Market Business

UCT GSB teaching case study on SA film industry wins top international award

Researchers from the UCT Graduate School of Business (GSB) have taken top honours in a prestigious international case writing competition, for their teaching case on the challenges of financing digital entertainment.

Read Article
Posted on 26 June 2020 by UCT GSB Press Office
Emerging Market Business

New coal and nuclear power proposals undermine prospects of a post-Covid-19 economic recovery

The Department of Mineral Resources and Energy’s attachment to ‘clean coal’ and new nuclear as immediate options for a post-Covid-19 economic recovery would be comical if they were not financially ruinous. Their fixation on these non-competitive, non-commercial technologies is now wasting scarce public resources.

Read Article
Posted on 17 June 2020 by Anton Eberhard
mundia mundia - media
Emerging Market Business

The role of development finance in rebuilding South Africa’s economy post-COVID-19

The global COVID-19 pandemic has set back developing countries especially, but it also offers an opportunity to rethink their development path.

Read Article
Posted on 15 June 2020 by Mundia Kabinga
Africa needs to embrace digitisation​ - media
Emerging Market Business

It's the 80s rewind - but with internet

South Africa needs to seize the opportunities for digitisation which have emerged as a result of the COVID-19 crisis, in order to thrive in the new global economy.

Read Article
Posted on 18 May 2020 by Herman Singh
Cape Talk logo - Media
Emerging Market Business

Q&A with Siwe Kuse about the Open Africa Power programme

Siwe Kuse, a researcher at the Power Futures Lab spoke with Cape Talk's Kieno Kammies about being a fellow on the Open Africa Power (OAP) Programme, an education initiative co-hosted hosted by the UCT GSB in partnership with Enel Foundation and the Nelson Mandela Foundation.

Read Article
Posted on 17 February 2020 by UCT GSB Press Office
Press Office
Emerging Market Business

Enel Foundation and UCT GSB host energy training in SA in celebration of Nelson Mandela

Enel Foundation, together with the UCT GSB as host, has inaugurated the third edition of Open Africa Power (OAP), aimed at empowering a new generation of leaders to drive Africa’s clean energy transition.

Read Article
Posted on 10 February 2020 by UCT GSB Press Office
time is running up - media
Emerging Market Business

Time is running out if we want to fix SA’s power crisis

Eskom’s new CEO Andre de Ruyter says it will take time to solve the South Africa energy situation. But as a new CSIR report chillingly points out - time is not on our side.

Read Article
Posted on 5 January 2020 by Wikus Kruger
Can the Coming Digital Tsunami Media
Emerging Market Business

Can the coming digital tsunami carry Africa to higher ground?

There is growing evidence that digitalisation could create new opportunities particularly for innovative entrepreneurs, and bring more inclusive growth through real job creation if the right choices are made.

Read Article
Posted on 18 July 2019 by Mignon Reyneke
Improving healthcare in MEDIA
Emerging Market Business

Improving healthcare in remote areas of Africa requires radical collaboration

While there are many innovative healthcare initiatives working to improve healthcare in rural Africa, the reality is that no one organisation can go it alone. Radical collaboration between organisations and with governments is needed to overhaul the system.

Read Article
Posted on 9 July 2019 by Katusha De Villiers
Three winning ways to tackle MEDIA
Emerging Market Business

Three winning ways to tackle youth unemployment through development finance

Development finance is an underutilised tool that can be directed towards tackling South Africa’s unacceptably high youth unemployment beyond the remit of mainstream finance.

Read Article
Posted on 1 June 2019 by Xolisa Dhlamini
4 March 2019 - Back to blackous energy pr
Emerging Market Business

Back to blackouts: SA's energy problems just the tip of the iceberg

Public-Private Partnerships, access to financing and targeted skills development will be crucial in addressing Africa’s chronic power shortage.

Read Article
Posted on 4 March 2019 by Wikus Kruger
Emerging Market Business

Development Finance Institutions (DFIs) can lead SA’s economic recovery

While government has identified DFIs as a key partner in delivering an economic turnaround — these institutions lack capacity and resources to do their jobs effectively. Fixing this will be a necessity.

Read Article
Posted on 4 November 2018 by Nicholas Biekpe