A collaborative effort is needed by the private and public sector to develop a relevant cyber security framework.
A collaborative effort is needed by the private and public sector to develop a relevant cyber security framework.
South Africa is lagging behind the developed world in terms of co-ordinated cyber defence and response strategies, says Winston Hayden, president of governance, risk and compliance association ISACA South Africa.
Hayden says the US Cybersecurity Framework, formulated in consultation with ISACA, is a good example of a proactive, collaborative approach to cyber security.
"In contrast, South Africa is still in the very early stages of developing a similar framework. As such, we are currently at high risk," he says. "Cyber crime is a major threat to all enterprises and to the public sector, with new factors such as cloud computing and big data management adding to the pressure of effectively securing data and networks."
Hayden says a collaborative effort is needed by both the private and public sector to develop a cyber security framework that is relevant and applicable to SA's unique environment. "In South Africa, there are limits to the skills and resources available, and less Department of Defence involvement than you will find in the US, for example. The risks we face are the same, though," he says.
He points out that work needs to begin on setting up committees to establish national cyber security frameworks and a national computer emergency response team (CERT). ISACA believes effective cyber security requires a comprehensive, proactive strategy with consistent controls and checks and balances. "Admittedly, putting this in place takes time and thorough planning, but currently there seems to be no sense of urgency in getting started," he says.
ISACA will be at the upcoming ITWeb Security Summit to share information on its research and membership.
