Technology
Phillips Consulting’s Guide to Avoiding Security Complexities
Many years ago, the firewall was everything. Defence-in depth was a concept defined as layered defence with multiple firewalls on the path.
Behind the firewall was a fortress. Organisations designed networks with strong perimeters and demilitarised zones to ensure the crown jewels were well-protected. Attackers had a difficult time trying to break into the firewalls.
On the physical layer, Network Admission Control (NAC) technologies were implemented to prevent intruders from having direct access into the network by preventing them from plugging unauthorised devices into the network. Before a device was admitted, it had to meet a minimum requirement defined by the organisation.
Those years are gone and maybe gone forever. Cloud computing, Bring Your Own Device (BYOD), Artificial Intelligence, Internet of Things (IoT), VPNs and Remote Working Capabilities have dramatically changed the way businesses run.
These technologies have introduced a level of innovation and disruption that were unimaginable only a few years ago. They have resulted in the collapse of the traditional network perimeter, thereby increasing the attack surface for cyber-attacks.
Enterprise networks coverage is today being extended beyond our imagination – outside the traditional datacentres to smartphones, cloud platforms, mobile computers and IoT interfaces without geographical boundaries.
The bad guys now have a plethora of interfaces to launch their attacks on; they do not have to breach the network using traditional social engineering tactics physically.
The recent changes in the work environment occasioned by the COVID-19 have further amplified the extension of network boundaries beyond the traditional datacentres.
Employees work from home with devices and connections into the enterprise networks that were not originally designed for such. Improvised connections were made to allow functionality because the pandemic came without an announcement.
The danger this poses is that some of these end devices were not originally designed with security in mind. Even if security was a consideration, not so much for enterprise data protection. These devices are most of the time not hardened, and their owners may not understand the effects on the overall organisational security posture.
A handful of these devices are installed with default passwords, and most times, these passwords are not changed during or after installation. So, it is easy to guess the password by manual methods or using advanced dictionary or brute force attack methods.
Another risk posed by these endpoints is the lack of security updates and patches. Because they are sometimes not seen to be part of the enterprise network, they are not included in the patch management programme, and their presence introduces high-level vulnerabilities within the enterprise network.
It then becomes easier to utilise malware that could tunnel through the firewall to breach the enterprise network, instead of spending months and years trying to break into the firewall or layers of firewalls.
In recent years, large-scale attacks have been launched using malware by exploiting known vulnerabilities and security gaps on endpoints.
For example, the WannaCry, Petya and another variant of Petya, the NotPetya were employed to launch attacks on enterprise networks through vulnerable endpoints. Another danger with this trend is potential data leakage because these devices are used to either temporarily or permanently store organisational data.
There is also concern about device loss. If these devices are lost, there is a risk of exposing the organisation’s data to unauthorised entities, and that could both result in financial and reputational damage.
These dangers are also expanded by the impact of the COVID 19 pandemic, where organisations made ad-hoc improvisions to support businesses while employees work from home.
As commerce resumes, organisations are beginning to discover some capabilities to support their businesses remotely, and they are also rethinking their business continuity strategies.
For some businesses, this is not just a temporal shift, but a change which has permanently altered the operational procedures of the organisation.
Legacy cybersecurity strategies, techniques and investments will not be enough to mitigate the rising cybersecurity concerns introduced by this new way of working. Protection has gone beyond throwing in uncoordinated technical solutions and efforts.
Organisations need to rethink a new approach for the protection of their assets within the ever-growing complexity both to remain afloat and also to derive commensurate Returns On Security Investments (ROSI). A well-crafted strategy will ensure that cybersecurity efforts are coordinated within the enterprise, without duplication of efforts and resources, which will, in turn, drive down the cost of implementing cybersecurity initiatives.
To improve security posture, organisations must do the following:
- Continuously monitor the devices, applications, and processes running on the network.
- Automate security monitoring and mitigation.
- Implement systems that are capable of automatic detection, isolation and containment of threats within the network.
- Ensure that monitoring covers event data, session data, and historical data on endpoint usages, such as past processes, network connections, and other information.
Another measure organisations should take is reducing complexities. The extension of the network boundaries has not stopped organisations from using existing network solutions to protect the enterprise network.
However, in a bid to ensure the protection of the on-premise infrastructure and the ones beyond the organisational traditional network boundaries, organisations combine existing technologies with new solutions and the resultant effect is an increase in complexity.
To effectively manage security, organisations should put measures in place to ensure a reduction in complexity and enhancing visibility. This can be achieved by unifying all efforts and technologies for managing both on-premise and off-premise infrastructure in a single platform. Beyond technical controls, organisations should develop procedures, standards, and policies for acceptable use of organisational resources.
By Modupe Gbadeyanka
The Executive Vice Chairman of the Nigerian Communications Commission (NCC), Mr Aminu Maida, has reemphasised the need to protect the nation’s telecommunications infrastructure, especially fibre networks, noting that damage to fibre networks carries significant economic consequences.
Speaking virtually at the Association of Telecommunications Companies of Nigeria (ATCON) Critical Conversation Forum on Fibre-to-the-Home (FTTH) in Lagos recently, he described FTTH as a critical enabler of Nigeria’s digital future.
“FTTH is uniquely positioned to meet Nigerians' next phase of data demand. The quality of our broadband will increasingly shape the competitiveness of our businesses, the growth of our digital industry and the opportunities available to our citizens,” the NCC chief stated.
“We must uphold deployment standards. Nigeria needs fibre that is properly installed, properly documented, and properly protected,” Mr Maida further said at the event themed Fibre to the Home in Nigeria: Addressing Challenges, Strengthening Standards and Ensuring Sustainable Deployment.
During a panel discussion titled Policy, Governance and Regulatory Alignment, the Deputy Director of Strategic Business Initiatives at ipNX, Mr Segun Okuneye, highlighted the need for stronger collaboration across the telecommunications ecosystem to unlock the full potential of fibre broadband in Nigeria.
According to him, sustainable fibre deployment extends beyond technology and investment to include policy consistency, stakeholder alignment, infrastructure protection, and shared responsibility.
“Achieving universal fibre connectivity requires more than deploying infrastructure; it requires sustained collaboration between operators, regulators, government agencies and host communities.
“When policies are aligned, deployment standards are consistently enforced, and critical infrastructure is protected, we create an environment where investment thrives and more Nigerians can enjoy reliable, high-speed broadband.
“At ipNX, we remain committed to working with all stakeholders to build resilient digital infrastructure that will support Nigeria’s economic growth for generations to come.”
Earlier in his welcome address, ATCON President, Mr Tony Emoekpere, underscored the strategic importance of FTTH in achieving the country’s broadband penetration targets while calling for greater public awareness around protecting communications infrastructure.
“This forum is critical because Fibre-to-the-Home is the technology that will enable the country to achieve full broadband penetration. We all depend on communication infrastructure, and it must be protected,” he declared.
Drawing a comparison with power infrastructure in the country, he added, “If somebody comes to your neighbourhood to tamper with your transformer or power cables, everybody will come out. The same thing needs to apply for communications infrastructure. When we see people damaging fibre cables, we should raise an alarm.”
By Modupe Gbadeyanka
Thursday, July 23, 2026, provided an opportunity for financial services professionals to converge on Landmark Event Centre, Lagos, to brainstorm on ways to meet the rising customers’ expectations.
The platform used for this purpose was Core by Interswitch. It is part of the company’s broader commitment to strengthening Africa’s digital payments ecosystem by fostering collaboration, knowledge sharing and operational excellence across the financial services value chain.
At the event, participants, numbering over 400, also highlighted the growing importance of operational excellence in sustaining resilient payment infrastructure.
As digital financial services continue to expand across Africa, closer collaboration among financial institutions, fintechs and payment service providers will be essential to improving responsiveness, resolving operational challenges more effectively and delivering consistently reliable customer experiences.
The Executive Vice President for Operations and Technology at Interswitch, Mr Babafemi Ogungbamila, said the forum reflects the company’s belief that exceptional customer experiences are built not only on innovative technology but also on the expertise, collaboration and commitment of the professionals who keep payment systems running every day.
“Every successful digital transaction is powered by professionals whose work often goes unseen but is fundamental to building trust in digital payments. Core by Interswitch was created to recognise their contribution, strengthen collaboration across the industry and create opportunities for shared learning that ultimately benefit financial institutions and the customers they serve.
“As digital payments continue to evolve, investing in the people and processes that power the technology is just as important as investing in the technology itself,” Mr Ogungbamila said.
Beyond recognising the professionals whose work often goes unnoticed, the programme underscored the value of creating stronger connections across the payments ecosystem.
By creating a dedicated platform for knowledge sharing, collaboration and professional development, Core by Interswitch aims to build a more connected community of payments operations professionals equipped to respond to the evolving demands of the digital economy.
By Aduragbemi Omiyale
WhatsApp has been updated with a web calling feature, allowing users to now make and receive audio and video calls, both one-on-one and group, directly from WhatsApp Web.
A notice from the Meta-owned messaging platform disclosed that this feature works without the need to download any app.
It was disclosed that this update was made to WhatsApp to make it easier for users to make calls wherever they are and on whatever device, phone or laptop.
Users will have access to features available on their other devices, including screen sharing, reactions, and a dedicated Calls tab with full call history and favourites, all from their browsers.
WhatsApp noted that calls from this feature are end-to-end encrypted, with no time limits and at no cost, as it is the same private experience they expect from the platform.
WhatsApp has also been embedded with easy call transfer, enabling the movement of an active group call from one device to another without hanging up. Users can seamlessly transfer calls to WhatsApp Web or Desktop when they arrive home to collaborate on a larger screen – or vice versa.
The platform further said it now has QuickHD, which allows for an improved video experience at the beginning of a call. With QuickHD, users can now enjoy high-definition video immediately in the very first few seconds of the call.
In addition, it has launched noise suppression to remove the background noise around callers so their voices come through clearly to the person on the other end, even in loud or busy environments. This can be managed at any time in in-call settings.
WhatsApp said these features are rolling out gradually and will be available to everyone soon, expressing its desire to make WhatsApp calling simpler to use.
