Explore publications.

As digitalization is on the increase, deposit money banks are faced with heightened exposure to cyber threats, which pose significant risks to their financial performance and operational stability. This study investigated how cybersecurity investment and cyber insurance affected the profitability of deposit money banks, to know whether preemptive cybersecurity management strategies and transfer of risk through insurance influence financial results in the banking sector. The results revealed that both cybersecurity investment and cyber insurance have significant positive effects on bank profitability, with coefficients of 7.832 (p < 0.01) and 17.08 (p < 0.05), respectively. The study also revealed that cybersecurity investment provides more accurate estimates than cyber insurance which is reflected in its narrower confidence intervals. The results emphasize the strategic role of cybersecurity investment and insurance to improve financial flexibility, reduce operational risk, and support enduring profitability. It concluded that banks that prioritize these strategies will not only mitigate possible losses from cyber incidents but also gain a competitive advantage through strengthened customer trust and operational efficiency. The study recommended that Nigerian deposit money banks should treat cyber insurance as a vital component of cyber risk management strategies. It is also recommended that bank management should treat cybersecurity expenditure as value-adding investments rather than operational costs.

Cybersecurity remains the priority of higher learning institutions owing to the growing cyber deviance against institution infrastructure as well its constituents and the implications those have on the institution. This section evaluates the cybersecurity defences, security policies which the institutions have in place to prevent and respond to emerging cybercrimes. This case study evaluates, Univen Information Communication Technology (ICT) officials who hold the mandate to manage cybercrimes within the institution. It therefore, evaluates if Univen have institutional framework for managing cybersecurity risk. It also assesses if it has been efficient to counteract cybercrimes impact against the university and students. The study discovered that Univen doesn’t have cybersecurity policy that is knowledgeable and consumable by all students. Students don’t know of avenues to report cybercrime. The students are failing to observe the terms of updating password for student ITS and Microsoft account, making their systems vulnerable and susceptible to cyberattacks. Qualitative approach is applied in the study; purposive sampling is applied to sample five (5) Univen ICT officials. The research utilises the routine activities theory and differential association theory of crime as the study problem framework. Sample was selected based on their suitability of contributing towards research; Focus group discussions was held with sample participants to collect data and Thematic Content Analysis (TCA), was used to analyse qualitative data. Ethical considerations observed in this study include: voluntary participation, confidentiality, obtain ethical clearance to conduct data. The study made findings and recommendations that inform adoption of framework to manage cybercrimes within higher education institutions (HEI) of South Africa and offer alternatives programmes that can positively address cyber incidents within academia.    

Technological development has witnessed tremendous and an increase in business interactions as they execute their daily business. Information technology and broadband are significant drivers of productivity and efficiency growth for small firms as they expand their market. This development has raised growing concerns as it relates to data and information security, infrastructure, and related resources  due to an increase in cybersecurity hazards faced  by Small to Medium Enterprises globally. In South Africa, although, during the first four months of 2022, cyber-attacks decreased by 13% to account for 419506 internet attacks, this statistic remains high enough for concern. To counter escalating cybersecurity risks, organizations must have a cybersecurity strategy to safeguard their operations, clients, data, and infrastructure. The threat landscape is changing over time, and despite ongoing attempts to strengthen security, they don't appear to be enough to prevent evolving cyberattacks. The study aims to identify cybersecurity threats facing Small to Medium Enterprises in South Africa by reviewing the literature and identifying key Cybersecurity challenges. It also examines the strategies, resources, and techniques used in South Africa to reduce cybersecurity threats. Lastly, the paper recommends adopting a comprehensive Cybersecurity strategy to build future-proof cybersecurity for Small to Medium Enterprises in South Africa.

Over the past two decades, cybercrime and cybercriminals have had a great impact on the safety, security and protection of the public sector’s confidential data and information assets. The increased usage of the internet and new, advanced 4IR technologies, and the digitisation of government’s public sector goods and services have become a growing concern to the government and its public sector institutions. In the South African context, as a developing country, it unfortunately lags behind advanced and developed nations in terms of fully counteracting cybercrime and cybercriminal operations. Despite this challenge, the South African government has been making tremendous efforts in combatting cybercrime. The aim of this article is to contextualise the study and practice of cyber threat intelligence at the national sphere of government in the South African public sector, namely, the former Department of Energy (DoE), former Department of Science and Technology (DST) and the former Department of Environmental Affairs (DEA) a qualitative research approach was followed using a case study approach. Primary data was collected through semi-structured interviews with senior departmental management. The findings are presented according to the Threat Intelligence Lifecycle analysis which serves as an analytical framework. The study concludes that in order to achieve effective cybersecurity practices and principles in the public sector , the government must identify the top trends commonly associated with cybersecurity to be able to develop and implement counteractive strategies and approaches, as well as to improve security systems and programs to ensure that an organisation is sufficiently prepared for and protected against cybercriminals and cyberattacks.

Globally, governments should prioritise and lead cybersecurity awareness as they have a duty to inform their citizens about responsible online behavior. This study aims to search for government-led cybersecurity awareness practices followed by the four world-leading countries (the United States of America (USA), the United Kingdom (UK), Saudi Arabia and Estonia) as evident on their websites. This qualitative study employs content analysis by performing a review of the four world-leading countries’ websites, with a specific focus on support materials and other relevant activities as part of cybersecurity awareness. Analysis of the websites found that cybersecurity awareness practices had a wide reach. Firstly, a host of multimedia content (videos, readings, infographics, memes, games, and quizzes) was used in addition to social media platforms. Secondly, the content was categorized for a range of users, with parents and children being favored. Lastly, for countries where the first language was not English, websites were in the official language in addition to English. The study contributes to the literature on cybersecurity awareness. The good practices employed by these countries could serve as a benchmark globally for other countries seeking to formulate or update their websites. Furthermore, showcasing the four world-leading countries serves to assist countries which have a lower Global Cybersecurity Index organizational measure can improve their cybersecurity awareness websites.

Cybersecurity is a set of technologies, processes, practices, and response and mitigation measures aimed at ensuring the confidentiality, integrity, and availability of networks, computers, programs, and data against attack, damage, or unwanted access. Cyber security risk management strategies include limiting data access to avoid putting sensitive information at risk. The purpose of the study therefore is to evaluate the effect of cybersecurity risk management practices on performance of insurance sector. A desktop literature review was used for this purpose. Relevant seminal references and journal articles for the study were identified using Google Scholar. The inclusion criteria entailed papers that were not over ten years old. According to the findings, detected cyber risks need to be properly addressed in order to prevent secondary impacts that lead to vulnerabilities that interfere with the life of insurance institutions and the well-being of their customers. In addition, the study concluded that insurance industry performance can be improved through the implementation of cybersecurity risk management practices. Since it has been found that cybersecurity risk management strategies have a positive and significant impact on the performance of the insurance sector, the research recommends that insurance companies increase their use. Additionally, financial institutions ought to have funds set aside specifically for the purpose of facilitating the retention of risks, in the event that these risks actually materialize. In addition, the research suggests that insurance companies reorganize their product lines or establish premiums that are competitive in order to reduce the threat posed by their rivals and, as a result, prevent the loss of customers to those rivals. The research further suggest that insurance companies adopt appropriate product pricing in line with estimated risk, as this will ultimately lead to increased profitability.