Cyber risk begins long before an attack
Cyber incidents are usually discussed from the moment an attacker appears, even though the conditions that determine how damaging that attack can be take place much earlier. By Frik van der Westhuizen, CEO of EQPlus Over time, a business influences its own exposure...
The exponential expansion of the enterprise attack surface
The risk to the business has grown significantly thanks to the widening footprint of the enterprise attack surface, writes Richard Frost, head of technology solutions and consulting at Armata Cyber Security. The enterprise risk footprint has grown exponentially. Until...
AI adoption is exposing the limits of cyber awareness
An organisation can train every employee to recognise a suspicious email and still expose sensitive information through an AI agent with excessive permissions. As businesses connect AI to their data and operations, cybersecurity awareness needs to reach the people...
Catastrophic events demand faster, smarter responses
The response mounted in the first hours and days following a catastrophic event can have far-reaching consequences for organisations, insurers, regulators and affected communities. This is the word from legal and industry experts speaking at an industry forum hosted...
What the future of risk can teach us about building resilient leaders
South African businesses are no longer dealing with isolated shocks. They are operating in a permanent risk environment, and leadership models need to catch up. By Izabela Stofberg, chief underwriting officer at Santam Re. BDO’s 2026 Global Risk Landscape report...
Why are we still fighting yesterday’s fraud?
For years, organisations treated fraud as a transaction problem: identify a suspicious payment, compromised account or fraudulent application and stop it before money leaves the system. By Amritha Reddy, senior director of fraud product management at TransUnion Africa...
Credential protection the new foundation of cyber resilience
Identity protection must be integral to cyber resilience. Although organisations continue to invest heavily in data protection and backup strategies, most breaches begin with compromised credentials, often privileged Active Directory (AD) accounts that give attackers...
Can you afford what comes after a cyberattack?
A cyberattack does not end when the malicious activity has been contained. For the impacted business, that is usually the time when the most expensive part begins, writes Yaron Assabi, founder of Digital Solutions Group. When an attacker breaches a system, the problem...
Ransomware has moved on. Has your security strategy kept up?
For 47% of South African organisations hit by ransomware in 2025, the attack succeeded because of inadequate protection. For 43%, a lack of cybersecurity capacity was a contributing factor. By Reza Joseph, group product manager: cybersecurity, cloud and unified comms...
Technical debt is becoming a cybersecurity threat
For many organisations, digital transformation occurred quickly and under pressure. Systems were rapidly deployed to support remote work, customer demands changed overnight, and businesses adopted cloud platforms, automation, and new digital services to stay...
When your IT provider is hacked, your balance sheet could be next
For many South African businesses, critical operations and customer data now rely on outsourced IT service providers (OSPs), including cloud hosts, software platforms, managed service providers and payment and fintech vendors. This dependence creates a risk that is...
Beneficial ownership is becoming a business continuity risk
For many business owners, beneficial ownership remains a compliance box to tick when filing an annual return. But increasingly, getting it wrong, or simply failing to keep it current, can have consequences far beyond paperwork, says Janus Joubert of JBS Advisory &...