Farieda Mayet, chief information officer at Netstar, shares the cybersecurity challenges that keep CIOs awake at night, and the innovative tools helping them combat cyber-threats.
As we celebrate Cybersecurity Month, Farieda Mayet reflects on a thought-provoking discussion from the CIO South Africa Cybersecurity Summit earlier this year, where technologists shared their biggest cybersecurity concerns and challenges.
She offers a candid overview of the concerns most pressing for IT professionals. Farieda highlights the evolving nature of cyber-threats, saying that hackers are increasingly weaponising cyber-attacks, leading to significant damage.
Farieda also points to the rising influence of state actors on the global stage, whose involvement in cybercrime is accelerating due to shifting geopolitical dynamics. These external forces add another layer of complexity to the cybersecurity landscape.
One of the top concerns for CIOs is the growing skills gap in cybersecurity. “The skills and knowledge within our organisations aren’t growing fast enough to keep pace with the ever-evolving cybersecurity challenges,” she says. To address this, Farieda highlights the importance of cross-industry collaboration. “We need to share lessons, learn from one another, and empower our teams to be resilient and proactive,” she adds.
Farieda went on to say that in her discussion, IT executives agreed that government institutions are especially vulnerable to cyberattacks. “They struggle to get the basics right, often due to budget constraints,” she explains. With the vast amount of sensitive data the government holds, a breach would not only pose risks to organisations but also to South African citizens.
The weakest link, human error
A common sentiment in cybersecurity discussions is that “the weakest link is between the chair and the keyboard”, and Farieda agrees. She points out that human error remains one of the biggest vulnerabilities in any security strategy. “CIOs need to ensure that their partners, suppliers, and vendors are as committed to data security as they are,” she advises.
Farieda also advocates for creating a culture of cybersecurity awareness across all levels of an organisation. Here are some key strategies from her discussion:
- Education: regularly educate your teams about cybersecurity, not just from a business perspective, but also from an individual standpoint.
- Engagement: involve board members and executives, making them aware of the risks of non-compliance and the importance of ongoing security protocols.
- Knowledge sharing: share lessons learned across industries in a secure manner, and build collective preventative measures against internal, external and global threats.
- Strategic approach: view cybersecurity as a key strategic initiative, not just an operational housekeeping task.
She also stresses the need to secure legacy systems with the necessary protections and regularly assess whether legacy systems are still fit for purpose.
Using technology to fight back
Fareida, along with other CIOs, sees AI-powered behavioural analysis as a ‘game-changer’ in cybersecurity. While it comes with a cost, it offers invaluable insights by studying user behaviour, helping organisations proactively address security needs.
However, Fareida cautions that before exploring advanced technologies, it’s critical to ensure basic cybersecurity hygiene is in place. “Network hygiene, patching and other housekeeping tasks are fundamental,” she notes. “These should be done consistently to provide a solid foundation before layering on more advanced technologies.”
While CIOs may feel pressure from emerging threats and the evolving digital landscape, Farieda offers a reassuring message: “Through a combination of strong basic security practices, innovative technology, and cross-industry collaboration, organisations can strengthen their resilience and proactively defend against cyberattacks.”
