Connect with us

Technology

Current Tech Market Conditions Leave Businesses Vulnerable to Insider Threat

Published

on

Quentyn Taylor tech market conditions

By Quentyn Taylor

How will GDPR regulations present new challenges for cyber security teams?  

GDPR legislation for both the UK and Europe has revolutionised the way businesses communicate, secure and store data, as well as holding businesses financially and personally accountable for when they fail to handle data correctly. In fact, GDPR fines hit a total of 97.29 million Euros in the first half of 2022, an increase of 92% over H1 2021.

This year, there has been an increasing number of fines centred around Article 32 of GDPR, which states that penalties can be enforced if companies have a lack of technical and security measures in place, even if this does not lead to a breach. While the focus will undoubtedly still be on enforcing reactive fines responding to data leaks, in 2023, penalising those that do not have adequate preventative measures will become increasingly more prominent. Ultimately, legislation has moved faster than many organisations can keep up with, particularly alongside the challenge of managing and executing IT security in a hybrid environment.  Next year, regulations will only become tighter, and organisations will be held up to increasingly higher scrutiny.

Where will IT investment be directed in 2023 and how will this impact the execution of security strategies?

Digitisation was critical in the shift to hybrid, and as a result, IT teams have enjoyed relatively high budgets in previous years while other business functions have been cut. However, now organisations are operating in a different landscape, with rising inflation and the threat of a global recession, many will begin to reassess all their budgets, IT included.

Despite this economic turbulence, security will remain a priority for investment. The threat landscape continues to develop at pace, and with financial and reputational damage attached to security breaches which could make or break some businesses as recession hits, minimising security budgets will be non-negotiable.

Yet, reducing IT budgets while increasing security investments present a problem when it comes to the execution of this strategy. Fundamental to the success of a security plan is whether it can be delivered via an operational IT team. Reducing spend for IT will inadvertently open organisations to attack, as security teams will not have the apparatus needed to implement their plans.

As we enter 2023, it is, therefore, critical for IT security leaders to consider their holistic IT strategy instead of viewing IT and security as two separate entities.

How will the global economic crisis impact the security industry?

Europe is still in a recovery state from the pandemic, and other macroeconomic pressures, such as energy shortages and soaring inflation rates are threatening how businesses can invest and grow. The tech industry has ultimately felt the crunch, with 12,000 tech jobs already being lost worldwide, the market is becoming increasingly more volatile and unpredictable.

Previously, the buoyancy of the tech sector meant many IT professionals were able to find a job by the end of the week if they were let go, but with this safety net removed, we will see cases of insider threat on the rise in 2023. Indeed, in Q3 2022, this peaked to its highest quarterly level to date accounting for nearly 35% of all unauthorised access threat incidents.

The current tech market conditions leave businesses vulnerable to insider threat, for example, some workers attempt to copy data and utilise it for their next employer. Cybercriminals will exploit this issue as well by keeping up with current trends in the tech sector, as they are able to implement new strategies that target those who are being laid off.

Organisations must ensure data is secured when employees leave the business and that it has not been transferred onto personal devices. Yet, according to our recent research, only 18% of IT decision-makers say they are able to track information across the full lifecycle. In response, businesses should increase visibility across their data journey, so organisations can identify when employees are printing and sharing information beyond company defences.

Quentyn Taylor – Senior Director of Information Security and Global Response at Canon EMEA

Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

Salesforce Unveils AI Fluency Playbook to Prepare Workers for Agentic Enterprise

Published

on

Salesforce Clean Energy Programme Management

Today, Salesforce published its AI Fluency Playbook, a practical guide for businesses to prepare their workforce to confidently collaborate with AI to give employees agents and drive business impact at speed and scale.

Why it matters: As companies look to become an Agentic Enterprise, success will depend on their workforce’s ability to harness and apply agentic AI in their daily work. Businesses that build AI-fluent workforces will drive greater growth and position themselves to attract top talent and become the best place to work. And it’s not just businesses that benefit – employees who use AI daily report 64% higher productivity, 58% better focus, and 81% greater job satisfaction.

Go deeper: The AI Fluency Playbook is built from Salesforce’s own experience deploying AI agents as Customer Zero for Agentforce. Today, Salesforce employees are collaborating with agents and 85% say they feel confident using AI tools to drive productivity in their daily work – a 16% increase year over year. The results are clear: In just one year, Agentforce in Slack saved employees over 500,000 hours, Engagement Agent worked over 190,000 leads with the sales team, and Service Agent handled 2+ million support requests for the customer service team.

AI agents are fundamentally redefining the workplace by automating repetitive, mundane tasks and augmenting the creative and strategic potential of every worker. However, simply deploying the technology is not enough; to truly transform daily operations and achieve superior business outcomes, employees must be equipped with the specific knowledge and tools required for seamless human-agent collaboration.

To bridge this gap, organizations can cultivate comprehensive AI fluency through a three-pillared approach: AI Engagement, which focuses on building employee sentiment and cultural confidence; AI Activation, which ensures consistent integration of AI into daily workflows; and AI Expertise, which develops the essential human and technical proficiencies needed to drive successful adoption at scale.

What customers are saying: “We’re focused on the most important skills that are needed for today and for the future,” said Ali Bebo, Chief Human Resources Officer at Pearson. “Today is all about learning agility – human skills like learning, adaptability, communication, and critical thinking are so important for the era of agentic AI.”

Continue Reading

Technology

NCC, CBN Implement 30 Seconds Refunds for Failed Airtime, Data Purchases

Published

on

purchase airtime

By Adedapo Adesanya

The Nigerian Communications Commission (NCC) and the Central Bank of Nigeria (CBN) have introduced new rules that will ensure faster refunds for failed airtime and data purchases, following rising consumer complaints over debits without value.

Under the new rules, refunds are expected to be completed within 30 seconds, except where a transaction remains pending, in which case the resolution can take up to 24 hours.

The new framework, contained in a statement issued by NCC’s Head of Public Affairs, Ms Nnenna Ukoha, on Thursday, targets unsuccessful transactions linked to network downtime, system failures and human errors that affect subscribers nationwide.

According to the statement, the guideline was developed after months of joint engagements involving telecom operators, banks, value-added service providers and other industry stakeholders.

The NCC said the framework brings the financial and telecommunications sectors up to speed on how failed transactions are handled and resolved.

“These engagements were prompted by a rising incidence of failed airtime and data purchases, where subscribers were debited without receiving value and experienced delays in resolution.

“The framework represents a unified position by both the telecommunications and financial sectors on addressing such complaints.

“It identifies and tackles the root causes of failed airtime and data transactions, including instances where bank accounts are debited without successful delivery of services,” she said.

Under the framework, Ms Ukoha said mobile network operators and banks are bound by a service level agreement that clearly defines their roles in transaction processing and refunds.

She emphasised that operators are also required to notify customers by SMS on the status of every airtime or data transaction.

The rules also address erroneous recharges to ported lines, incorrect airtime or data purchases, and instances where transactions are made to the wrong phone number.

On her part, the Director of Consumer Affairs at the NCC, Mrs Freda Bruce-Bennett, said the framework also introduces a central monitoring system to improve oversight.

She said the dashboard will be jointly managed by the NCC and the CBN to track failed transactions, refunds and breaches of service timelines in real time.

“We are grateful to all stakeholders, particularly the CBN and its leadership, for their tireless commitment to resolving this issue and arriving at this framework,” she said.

The official said failed top-ups are among the top three complaints received by the commission, adding that implementation of the framework is expected to begin on March 1, subject to final approvals and completion of technical integration by all operators and banks.

Continue Reading

Technology

Nigeria, Google in Talks for New Undersea Cable

Published

on

google nigeria

By Adedapo Adesanya

The Nigerian government is in advanced talks with Google for a new undersea cable to strengthen the country’s digital connectivity and resilience.

The country wants to augment existing undersea links with Europe, said the chief executive of National Information Technology Development Agency (NITDA), Mr Kashifu Inuwa Abdullahi, as per Bloomberg on Tuesday.

Mr Inuwa said this was necessary at this time, calling Nigeria’s current reliance on cables that follow the same path “a single point of failure.”

Google earlier this year said it plans to expand its digital presence significantly in Africa with the development of four new strategic subsea cable connectivity hubs in the north, south, east, and west regions of the continent.

Already, Google is investing $2.1 million to accelerate Nigeria’s artificial intelligence (AI) growth, aiming to create one million digital jobs and bolster the country’s expanding technology economy.

This is aligned with Nigeria’s National AI Strategy, which is expected to play a meaningful role in the nation’s broader digital transformation. Projections indicate that AI could contribute up to $15 billion to Nigeria’s economy by 2030.

The fund will support partnerships with local organisations. To achieve these aims, the funding will support partnerships with local organisations working in digital skills development and cyber security.

The investment further signals global trust in Nigeria’s technology sector and underlines the nation’s role as a leader in Africa’s digital transformation. As new opportunities emerge, Google believes it support is set to help shape Nigeria’s economy and its place on the global technology stage.

Continue Reading

Trending