By Abraham Makamba Exec Managed Services Liquid Intelligent Technologies Zimbabwe
Zimbabwean businesses, like their counterparts across Africa, are accelerating their digital transformation journeys. While the opportunities associated with digitisation are well known, there are also risks involved – cyber threats that can disrupt operations, damage public trust, and slow economic progress.
From phishing and ransomware to sophisticated fraud attempts, cybercriminals will stop at nothing in their attempts to breach digital security measures. In 2024, Zimbabwe was the third most attacked country globally. For leaders tasked with safeguarding their organisations, the question is not if an attack will happen, but when.
Assume – and prepare for – the worst
The traditional, siloed approach to cyber security is no longer enough. Zimbabwean organisations are realising the importance of adopting a comprehensive, always-on security strategy that integrates protection, detection, and response – in essence, an ‘assume breach’ approach.
In addition to securing operations, it’s also wise to address issues such as resource constraints and regulatory compliance. For instance, many organisations lack dedicated security staff or budgets to secure their systems properly. Additionally, Zimbabwe’s Cyber and Data Protection Act of 2021, which provides a legal framework to ensure data privacy, protection, and cyber security, has placed greater pressure on businesses to have appropriate safeguards in place.
The human factor: The weakest and strongest link
Many breaches are the result of human error, including accidental data leaks, poor password controls, and falling victim to social engineering attacks. Creating a security-conscious culture amongst employees is just as important as investing in advanced tools. How? Regular training, simulated attack exercises, and a clear process for reporting suspicious activity.
Benefits of a holistic approach to cyber resilience
With Gartner reporting that 75% of organisations are consolidating their security vendors to streamline operations and improve risk management, it makes sense to entrust this task to a specialist cyber security partner that can provide a 360-degree solution. While each business will have unique needs, there are fundamental pillars that underpin this approach:
- Governance and strategy: Establish clear policies and frameworks that align with regulatory requirements, such as Zimbabwe’s Cyber and Data Protection Act. For example, small retail businesses collecting customer data should ensure they have explicit consent processes in place and securely manage customer records.
- Testing and assessment: Regular vulnerability assessments and penetration testing are crucial for identifying weaknesses before attackers can exploit them. Conducting simulation tests with employees makes them aware of how easily they can be misled – and the potential consequences. This highlights the need for awareness training in conjunction with technical controls.
- Solutions and deployment: Integrated security solutions that protect endpoints, cloud environments, and networks are vital. But it’s not enough to have the tools; they also need to be deployed effectively and updated and configured correctly.
- Management and monitoring: Continuous monitoring for threats, combined with well-defined incident response plans, can mean the difference between a minor security event and a significant breach.
By integrating these aspects into their cyber security strategies, Zimbabwe’s businesses can protect themselves against a wide range of online threats. This is the basis of Liquid’s integrated, real-time threat monitoring and response approach, which includes dedicated, in-country Cyber Security Fusion Centres, providing comprehensive cyber security solutions to customers 24/7.
Businesses that embed security at the heart of their operations will be best placed to thrive, safeguarding not just their own futures but also contributing to a more secure digital economy for Zimbabwe as a whole.
It’s about being proactive rather than reactive in Africa’s increasingly complex cyber security landscape.
