The Changing Shape of African Cybersecurity

The key findings reveal that:

• The COVID-19 pandemic has fundamentally changed how people live, work and approach security, and 24% of the respondents indicated that they were affected by cybercrime while working from home.
• Sixty-seven percent of those surveyed use their smartphones on a regular basis for both payments and mobile banking.
• The number of people concerned about cybercrime has risen to 48% (from 38% in 2019).

The 2020 KnowBe4 African Report collated insights from 881 respondents across Nigeria, South Africa, Kenya, Ghana, Egypt, Morocco, Mauritius and Botswana to discover how the continent views cybersecurity and its risks in a world shaped by a global pandemic.

The report found that attitudes and behaviors had shifted as a result of the pandemic, but problem pockets of risk remain that need to be addressed in order to ensure both business and individual security.

Anna Collard, SVP of content strategy and evangelist, KnowBe4 Africa, commented:

“Nearly 50% of the respondents will continue to work from home; 24% indicated that they were affected by cybercrime while working from home, and only 30% believed that their governments prioritized cybersecurity in their policies,” says 

This year, respondents were even more concerned about cybercrime compared with 2019, with the number rising by 10% to 47.61%.

Across all eight countries, there’s a growing awareness of the risks that come with cybercrime.”

However, people are still taking unnecessary risks. Around 63.98% would give away their personal information if they believed that there was a need for it, or if they understood what it was being used for, which is a measured response in light of government and organization requests for data to verify identity.

However, the concern lies in the 7% who would give away personal information if they got something back in return, like a discount, and the 6% who do it all the time.

This is supported by the fact that only 46% could define ransomware, nearly 20% have forwarded a spam or hoax email, 30% have clicked on a phishing email, 33.41% have fallen for a con artist or a scam, and 52.7% have had a virus on their PC.

“In South Africa, a worrying 31.5% thought that a Trojan virus encrypts files and demands payments, highlighting the need for training and education; especially considering that 40% of respondents think they would comfortably recognize a security threat if they saw one.

“Most people don’t realize what a risky email looks like or how their actions could result in their systems becoming infected.”, Collard said

Email security is one of the biggest threats facing the average user, both at work and at home, and it is one of the most common communication methods – nearly 87% use email for work, closely followed by WhatsApp at 85%.

For their private lives, WhatsApp is the most popular communication channel on the continent, with 96% of respondents chatting on it with their friends and families.

Seventy-seven percent reported the pandemic changed the way they work, with more than 50% changing this for the foreseeable future.

“For organizations, it has become critical that they train employees on security best practices and the various methodologies used by cybercriminals,” concludes Collard.

“People need more help in learning about cyber threats, especially since 50% are continuing to work from home.

Employee training is one of the most important defense mechanisms – employees need to learn how to spot social engineering and phishing attacks, understand why weak passwords put them at risk, and how multi-factor authentication works.

They should also learn how to protect their home networks and what to do in the event of a security incident.”

Education and awareness have become key in protecting people and organizations from the cybersecurity risks out there, especially as many continue to work from home.

For businesses looking to remain alert and minimize the human risk in cybersecurity, training and awareness are the best first steps to supporting employees and embedding a culture of security within the organization.

To find out more about the report, download it here.

Don’t miss important articles during the week. Subscribe to techbuild.africa weekly digest for updates.