Zimpapers Logo

Ivan Zhakata

Herald Correspondent

Major efforts are being made by Government through the Ministry of Information Communication Technology (ICT), Postal and Courier Services to ensure that there are measures to mitigate against cyber-attacks on Zimbabweans.

Speaking at the cyber security and fraud summit in Harare yesterday, Permanent Secretary for ICT, Postal and Courier Services Dr Beaullah Chirume said digital transformation was reshaping the business landscape, enabling organisations to operate more efficiently, innovate faster, and deliver new value to customers.

The transformation also introduces new risks and challenges, particularly in the realm of cyber security.

Recent statistics show that 61 percent of organisations experienced a phishing attack in 2020, with 94 percent of malware being delivered via email, according to Verizon and 80 percent of organisations experienced at least one successful cyber-attack in 2020, with the average cost of a data breach being US$3,86 million, according to IBM.

According to Fortinet, 61 percent of organisations believe that their digital transformation initiatives have increased their cyber security risk.

Dr Chirume said the statistics highlighted the need for a strategic and proactive approach to cyber security in the context of digital transformation.

“At the heart of this approach is the recognition that cyber security is not just an IT issue, but a critical business risk that requires a holistic approach to mitigate,” she said.

“This means that cyber security must be integrated into all aspects of an organisation’s digital transformation strategy, from governance and risk management to employee training and awareness. To achieve this, organisations need to adopt a risk-based approach to cyber security that takes into account the unique risks and challenges posed by their digital transformation initiatives.

“This includes conducting regular risk assessments, implementing appropriate security measures, monitoring for threats and vulnerabilities, and responding quickly and effectively to any incidents. It also means investing in the right people, processes, and technology to support a strong cyber security posture.”

To mitigate cyber attacks businesses must hire skilled cyber security professionals, develop robust policies and procedures, and leveraging advanced technologies such as artificial intelligence and machine learning to identify and respond to threats in real-time.

She said their thrust as a Ministry was to ensure that there were measures to mitigate against cyber-attacks for businesses and individuals. Institutional cybersecurity issues should start and end at the highest level of management.

“C-suite executives must understand all the cyber risks associated with their organisations thus making them accountable and responsible for the organisation’s cybersecurity activities,” she said.

“Businesses that fail to adopt digital transformation face several cybersecurity problems, which include amongst others increased attack surface, lack of visibility, outdated security systems and lack of cybersecurity expertise to manage in house risks.

“As more and more organisations adopt digital transformation to improve their performance, efficiency, and customer experience, they also need to consider the security implications of their digital initiatives.

“But perhaps the most important component of a strong cyber security posture is a culture of security. This means instilling a sense of responsibility and accountability for cyber security across the organisation, from the boardroom to the front lines. It means educating employees on best practices for cyber security, empowering them to report suspicious activity and rewarding good behaviour.”

Dr Chirume said Zimbabwe needs chief executives and organisational leadership who are prepared to advance the agenda for cybersecurity and digital transformation to remain relevant and safe in the gig economy.

Reliable and resilient digital transformation could be achieved when it was founded on cybersecurity.

“I want to emphasise that cyber security is a critical business risk that must be addressed proactively in the context of digital transformation.

“By adopting a holistic approach to cyber security, investing in the right people, processes, and technology, and fostering a culture of security, we can protect ourselves against the growing threat of cyber-attacks and maintain public trust in operations.

“Our Ministry is passionate about cybersecurity education. We believe working together can create a safer digital world for everyone. Cyber Security is indeed our shared responsibility.”