Category:

Cyber security

South Korea Bans New Downloads of DeepSeek AI Chatbot Over Privacy Concerns

by Brian Yatich February 18, 2025

South Korea has prohibited new downloads of DeepSeek, a popular Chinese artificial intelligence (AI) chatbot, according to the country’s Personal Information Protection Commission.

The ban, which took effect on Saturday evening, removes the app from Apple’s App Store and Google Play. However, users who have already downloaded the app will still be able to use it, and access will remain available through DeepSeek’s website.

The decision follows a rapid rise in popularity for DeepSeek in South Korea, where it topped app store charts with over a million weekly users within a week of gaining global attention.

Despite its success, the app has faced increasing scrutiny worldwide over privacy and national security issues, prompting similar restrictions in other countries.

South Korea’s government has also taken internal measures, with several agencies banning their employees from installing the chatbot on work devices.

Acting President Choi Sang-mok has warned that DeepSeek could have far-reaching implications for the country’s industries, extending beyond the AI sector.

The Personal Information Protection Commission stated that the ban will remain in place until DeepSeek implements “improvements and remedies” to comply with South Korea’s strict personal data protection laws.

February 18, 2025 0 comments 163 views

Check Point Announces New CEO and Transition of Founder to Executive Chairman

by Brian Yatich December 18, 2024

written by Brian Yatich

Check Point Software Technologies Ltd. (NASDAQ: CHKP), a pioneer and global leader in cybersecurity solutions, has announced leadership transition.

Founder Gil Shwed is moving into the role of Executive Chairman of the Board of Directors, and Nadav Zafrir has been appointed as the company’s new Chief Executive Officer, effective December 16th.

“Check Point embarks on a new chapter, with my transition into my new role as Executive Chairman and the appointment of Nadav as the company’s new CEO. I’ve known Nadav for many years and he is the perfect fit to lead Check Point to new heights,” said Mr. Shwed.

I have full confidence in the company’s strategy, strength, leadership and employees, and we will work together to ensure this new journey brings even more success than we’ve achieved so far.

Nadav Zafrir, the new CEO, expressed his enthusiasm for the role, stating, “I am honored to join Check Point as its new CEO. To lead an iconic cybersecurity company at such a pivotal time for our industry is both a privilege and a profound responsibility.

Our world relies on trust, and Check Point’s mission to establish and protect that trust has never been more critical. We are uniquely positioned to live up to this mission, and shape the future of the cybersecurity industry. I thank Gil for his confidence and visionary leadership, and I am grateful to have him as a partner and mentor as our Chairman.”

Zafrir brings a wealth of industry experience to the role. Most recently, he was the co-founder and managing partner at Team8, a company-building venture group focused on cybersecurity, data & AI, fintech, and digital health. Prior to that, he established the IDF’s Cyber Command and served as Commander of the elite Unit 8200, retiring as a Brigadier General.

He has also served on the boards of 14 private cybersecurity companies and is a board member of SolarEdge Technologies.

This leadership transition marks a significant milestone for Check Point as it navigates the evolving cybersecurity landscape and positions itself for continued growth and innovation.

December 18, 2024 0 comments 116 views

Cyber security Opinion Tech

Strengthening Cybersecurity in African Universities

by Phyllis Migwi October 22, 2024

written by Phyllis Migwi

When thinking about industries that cybercriminals might target, tertiary education probably isn’t the first to come to mind. But according to the latest edition of Microsoft’s Cyber Signals report, education was the third most targeted industry in the second quarter of this year. The mix of valuable data and inherent vulnerabilities in education systems has caught the eye of various attackers—from those using new malware techniques to nation-state actors involved in traditional espionage.

This is a particular concern for tertiary institutions in Africa, which is one of the most targeted regions in the world when it comes to cyberattacks. In fact, a recent study of 60 Kenyan universities showed that most of these institutions were experiencing hacks, while also battling a lack of adequate cybersecurity policies and controls, including organisational, human, physical and technological resources.

Just last year a prominent Moroccan institution of higher learning was hit by a security breach of its master’s degree nomination platform, while a private university in Nigeria had its website completely overtaken by hackers.

It’s clear that the education industry’s vulnerabilities haven’t gone unnoticed by cybercriminals. According to the Cyber Signals report, in the past year alone, more than 15,000 emails with malicious QR codes were sent daily to the sector using Microsoft Office 365 email. This highlights just how targeted and persistent these threats have become.

There are several reasons why hackers often target the education sector. Unlike typical enterprises, universities have a diverse group of users—students, faculty, administration staff, and others. The open and dynamic nature of university environments, with frequent activities and international students, makes them particularly vulnerable to cyberattacks.

Email systems in schools offer wide spaces for compromise

This naturally open environment means universities are often more relaxed about email security. With a lot of emails creating noise in the system, institutions are limited in how they can place controls because they need to stay accessible for alumni, donors, and external collaborations. This mix of openness and lack of controls makes them prime targets for attacks.

Virtual and remote learning have also extended educational applications into homes and offices. Personal and shared devices, which are often unmanaged, are everywhere. Students, not always savvy about cybersecurity, might unknowingly expose their devices to risks.

Legacy infrastructure leaves school systems vulnerable

The tertiary education sector often faces well-known funding and operational challenges. This means that cutting-edge digital classrooms have to operate alongside older applications and other IT assets. Managing and safeguarding these varied systems is tough, especially when it’s hard to keep cybersecurity experts on staff. This combination leaves school systems more vulnerable to attacks.

Nation-state actors are after valuable IP and high-level connections

Cybercriminals know that schools handle sensitive, regulated information and must stay open and accessible, making them targets for ransomware and extortion.

Universities are hubs for valuable intellectual property and cutting-edge research, often in collaboration with government agencies. This makes them attractive to attackers looking to steal or leverage sensitive data.

For example, it can be easier for hackers to initially target someone in the education sector with ties to the defense sector and then use that access to launch more convincing phishing attacks on higher-value targets.

Introducing a strong security curriculum

Strengthening security measures can be a daunting and expensive task for schools, but there are steps they can take to protect themselves.

Having a clear understanding of the threat environment is an essential place to start. Reports like Cyber Signals are invaluable resources for chief information security officers and their teams as they refine technologies, policies, and processes. This quarterly cyberthreat intelligence brief, informed by the latest Microsoft threat data and research, provides expert insights into the current threat landscape and the tactics and techniques used by threat actors. It underscores Microsoft’s commitment to securing the digital ecosystem, in which we play such a central role. At Microsoft, security is our top priority, ensuring we earn and maintain the trust placed in us.

Beyond current insights, maintaining strong cyber hygiene is crucial. Raising awareness of security risks and promoting good practices among students, faculty, staff, and administrators can help create a safer environment.

For IT and security pros in education, starting with the basics and beefing up security is a good move. Centralising the tech setup can assist in monitoring activities more effectively and spotting vulnerabilities more easily. Specifically, the Cyber Signals report recommends that IT teams think about using “protective domain name service,” a handy free tool that can help stop ransomware and other cyberattacks by blocking access to harmful websites. To prevent password spray attacks, they should make sure to enforce strong passwords and set up multifactor authentication.

For under-resourced IT teams, tools such as Microsoft Copilot for Security can significantly enhance the efficiency and capabilities of security defenders, allowing them to improve their security outcomes at machine speed and scale. This AI-powered security solution provides an assistive copilot experience, supporting professionals in end-to-end scenarios like incident response, threat hunting, intelligence gathering, and posture management.

It’s also important for universities to teach students and staff about good security habits and encourage them to use multifactor authentication or passwordless options. According to the report, accounts are more than 99.9% less likely to get hacked with multifactor authentication.

By putting stronger defenses and proactive measures in place, universities can better equip themselves to fend off the increasing threats to their sensitive data and groundbreaking research. Building a solid security posture isn’t just about technology; it’s also about fostering a watchful culture ready to manage potential attacks. Investing in these measures now will safeguard their valuable assets and ensure their critical work continues without disruption.

Phyllis Migwi, Country General Manager, Microsoft Kenya.

October 22, 2024 0 comments 275 views

Cyber security Tech

Scammers now hiding phishing links behind images, Kaspersky warns

by Brian Yatich September 23, 2024

written by Brian Yatich

Kaspersky experts discovered a phishing campaign with an unusual attack vector – through an image. This scam targeted organisations in the fields of online retail, distribution, transportation, and logistics. The cyber attackers aimed to steal corporate email credentials from potential victims.

Within the phishing scheme, the cyber attackers send emails in English, allegedly on behalf of a South Korean company. Pretending to be employees of this organisation, the cybercriminals email about sending instructions to their bank for transferring a payment.

They ask potential victims to check the details in the scanned document, which is added to the body of the letter. According to the legend, this must be done quickly in order to receive payment as soon as possible.

“The image in these phishing emails is poorly visible – this is what the attackers are counting on. Even if a person does not expect an email, he may be interested in looking at the details. However, in reality, the image hides a phishing link. ” says Roman Dedenok, a cybersecurity expert at Kaspersky.

‘If the users click on the scan, they will be redirected to a fake resource that mimics a file sharing service from Adobe. There, they will be asked to enter the credentials for a corporate email account to gain access to the document. However, this should never be done, otherwise this information will go to the cybercriminals,”

To avoid becoming a victim of such phishing attacks, Kaspersky recommends that users do not trust emails from unknown mailboxes, especially when it comes to confidential data, financial transactions and suspicious attachments, even if it visually looks like the email came from an organisation with a good reputation.

Kaspersky also recommends that companies install a reliable security solution that will automatically send such emails to spam, and also regularly conduct cybersecurity training for employees, teaching them how to recognise social engineering techniques.

In 2023, Kaspersky participated in 100 independent tests and reviews, with its products being awarded 93 first places, achieving the highest result of all years.

September 23, 2024 0 comments 203 views

Cyber security Opinion Tech

Top 5 Cybersecurity Threats to look out for in 2024

by Kwabe Ben January 22, 2024

written by Kwabe Ben

By Hariprasad Viswanathan, Head- Sub Saharan Africa, VFS Global

The information security industry is on high alert due to a variety of new and growing cybersecurity threats. The data and assets of businesses, governments, and people are always at risk due to sophisticated cyber-attacks involving malware, phishing, identity theft, and more.

Even though conversation about cyber security has gradually moved from the IT department to the boardroom in recent years, the bad news is that cyber-criminal activities frequently outpace business security efforts, necessitating the constant adaptation of security teams to a threat environment that is constantly changing.

In a recent survey conducted by IEEE, which included 350 chief technology officers, chief information officers, and IT directors, 51% of participants cited cloud vulnerability as their top concern, whereas 43% cited data center vulnerability as their top concern, highlighting the need for organizations to focus on securing their cloud and data center infrastructure, as these areas are becoming increasingly targeted by cybercriminals.

As the digital landscape continues to evolve, so do the threats that aim to exploit it. Cybercriminals are expected to continue to use increasingly sophisticated methods to gain unauthorized access to sensitive information and disrupt critical systems. Hence, industry experts must keep an open eye on cybersecurity threats, to lead their organization best, and to avoid being a part of any data privacy mishaps.

Here are the top 5 cybersecurity threats to watch out for:

Ransomware: According to a recent Statista report published in October 2023, more than 72% of organizations globally were impacted by ransomware attacks in 2023. This number was by far the largest reported and shows growth over the preceding five years., Although this does not imply that every attempt was successful, it does show how common this cyber threat is. Threat actors can now very easily gain access to powerful ransomware tools and with just a little technical know-how, fraudsters may launch attacks that cost businesses millions of dollars. These attacks have become more targeted, and attackers are now demanding larger ransoms. If these attacks continue, businesses, governments, people, and organizations across almost every industry will be plagued by ransomware.

Data Poisoning: Artificial intelligence and machine learning (AI/ML) are sometimes a double-edged sword as businesses use them to boost defenses and avoid cybercrimes. AI and machine learning (AI/ML) surely open up new possibilities for businesses in every industry, according to an IBM 2022 survey that revealed that 35% of organizations were utilizing AI in their business and 42% were exploring it. But as hackers become more sophisticated, they are also using this technology to carry out their attacks. AI and data poisoning are two methods used by attackers to do this, which presents a serious challenge for those in the field of cyber security.

Cloud-based attacks: The number of attacks on cloud infrastructure has risen sharply in recent years, with the COVID-19 pandemic playing a significant role in this trend. As businesses of all sizes had to quickly adapt to new ways of operating, many turned to cloud-based solutions. According to Gartner, it is anticipated that global end-user spending on public cloud services will reach $591.8 billion in 2023 and by 2025 over 95% of new digital workloads will be deployed on cloud-native platforms. As a result, businesses must now consider new and robust security strategies to manage the growing risks associated with cloud services. The following statistics reflect the growing popularity of cloud computing and the corresponding increase in attacks on these systems in recent years.

AI-based attacks: In cybersecurity, artificial intelligence is becoming more and more significant, both for good and harm. The most recent AI-based techniques can help organizations better identify risks and safeguard their systems and data resources. However, cybercriminals can use this technology to drive complex attacks. AI can be used to detect patterns in computer systems that reveal vulnerabilities in software or security programs and hackers can exploit these weaknesses. AI can also be used in combination with stolen personal information or publicly available data, such as social media posts, to create large numbers of phishing emails to spread malware or gather valuable information.

5G attacks G technology, although promising with its benefits, also poses some security risks that are worth taking into account. These may include an increased risk of supply chain attacks on 5G infrastructure, which could result in malicious software and hardware from untrusted vendors being used, or the shift towards edge computing with 5G, where computing resources are located at the edge of the network rather than a central hub, may increase the likelihood of untrusted and potentially unsecured devices connecting to the 5G network.

As technology continues to evolve and play a central role in our lives, individuals and organizations need to stay vigilant and adapt to the new threats that may arise. It is important to implement security measures such as using multi-factor authentication, keeping software updated, and regularly backing up important data. Regularly training employees to detect and avoid potential cyber threats, will be critical in protecting the organization from a cyber attack.

January 22, 2024 0 comments 560 views

Cyber security Tech

Check Point’s Global Threat Index: Surge in Cyber Threats, Top Mobile Malware

by Brian Yatich November 14, 2023

written by Brian Yatich

Check Point® Software Technologies Ltd., a renowned cybersecurity solutions provider, has unveiled its Global Threat Index for October 2023, shedding light on a disturbing surge in cyber threats.

The report highlights the rise of the Remote Access Trojan (RAT) NJRat, which has climbed from sixth to second place, with a significant focus on targeting government agencies and organizations in the Middle East and Africa.

This escalation in cyber threats has been particularly severe in Africa, with Mauritius ranking 6th, Nigeria 11th, Morocco 15th, and Kenya 25th in terms of being targeted and attacked. South Africa follows, ranking 55th globally.

The report also emphasizes the expanding reach of the sophisticated RAT AgentTesla, propelled by a new and intricate mal-spam campaign using corrupted email attachments. The education sector remains a prime target, underscoring the ongoing vulnerability of this industry to cyber attacks.

According to Check Point Sales Engineer Rudi van Rooyen, “We cannot overlook the sophisticated tactics used by hackers to distribute malware, such as impersonating trusted brands or using malicious email attachments. As we enter the busy shopping season in November, it’s crucial to stay alert. Cybercriminals are taking advantage of the increased online shopping activity, and no region, including Africa, is immune to these threats.”

Check Point’s research also revealed that the “Zyxel ZyWALL Command Injection (CVE-2023-28771)” was the most exploited vulnerability, impacting 42% of organizations globally, followed by “Command Injection Over HTTP” and “Web Servers Malicious URL Directory Traversal.”

The report further outlines the top mobile malware, with Anubis remaining in first place, followed by AhMyth and Hiddad. Anubis is a banking Trojan malware designed for Android mobile phones, while AhMyth is a Remote Access Trojan (RAT) and Hiddad is an Android malware that repackages legitimate apps to display ads and gain access to key security details.

The ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence, which provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints, and mobiles.

The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research arm of Check Point Software Technologies.

This comprehensive threat index provides valuable insights into the evolving cyber threat landscape and helps organizations and individuals stay informed and protected against emerging cybersecurity risks.

November 14, 2023 0 comments 682 views

Cyber security Opinion

Time to Shape Up: Embrace Code of Conduct to Build Trust, Keep Kenyans Online Safe

by Jacob Otieno August 24, 2023

written by Jacob Otieno

The Media Council of Kenya (MCK) recently published a Code of Conduct for Digital Media Practitioners. It was long overdue.

We live in an era when a seconds-long video clip can ignite a national debate and shape public opinion overnight. To put things into perspective, let me take us back to the TikTok saga.

A few days ago, a petition was tabled in parliament seeking to ban use of TikTok in Kenya. The petitioner, identified as Bob Ndolo, an executive officer at the Briget Connect Consultancy, posited the ByteDance-owned app was a threat to our cultural and religious values.

Ndolo argued TikTok was exposing our children to explicit content, promoting violence, hate speech, vulgarity, and offensive behavior. For these reasons, it should be banned.

TikTok Ban Not a Solution

Not everyone was persuaded, though. A section of Kenyans, including members of parliament, opposed the proposed ban. They argued the short-form video-sharing app with Chinese roots was a source of livelihood for many Kenyans.

And as expected, online content creators were all up in arms. TikTok influencer Rose Atieno, best known as Nyako, took to her favourite platform to protest:

“One selfish person can make a motion that he wants TikTok banned. We have to sit at the table with the government and regulate how TikTok can work for us peacefully. They have to consult us first,” she fumed.

“Let them put rules to govern Tiktok. That’s the way to go. This app helps a lot of people earn a living,” Jackline Mwende added as the debate on the TikTok ban petition raged on.

There were divergent views on how TikTok was impacting Kenyans’ livelihoods and reshaping societal norms. But notably, both sides appeared to agree there was a need for rules to govern the use of TikTok.

The calls for TikTok regulation mirror the huge responsibility that digital media practitioners are confronted with as they seek to reach more audiences and tap into new markets. TikTok and other social media platforms such as Facebook, Twitter (now known as X), and YouTube have become instrumental in shaping public discourse, and opinions and reaching diverse audiences.

However, with this influence comes the responsibility to uphold the integrity of the information shared, combat misinformation and disinformation, push back on hate speech, cyberbullying, and harassment, and maintain high ethical standards that are essential for the practice of journalism.

Bridging Trust Gap Online

The level of public trust in news content published on social media platforms has been disturbingly low as a result of the proliferation of fake news and all sorts of unsafe content being circulated on these platforms.

According to Digital News Report 2023 by Reuters Institute, trust in online news fell to 40%, down 2% from 2022, erasing the progress that had been made during the Covid-19 pandemic globally.

The report showed 64% of social media users were worried about misinformation, compared to 50% among non-users.

A staggering 56% of the people surveyed agreed with the statement, “Thinking about online news, I am concerned about what is real and what is fake on the internet.”

In light of these emerging concerns, the media’s role as a counter to the proliferation of misinformation and disinformation in the online space coupled with low and dwindling public trust is more pressing than ever.

Media Council of Kenya’s Intervention Timely

The Code of Conduct for Digital Media Practitioners published by the Media Council of Kenya arrived at a critical juncture.

As digital media continues to evolve to keep pace with disruptive innovations, its practitioners must also adhere to professional guidelines that can safeguard the public interest and help rebuild lost trust and confidence.

This Code should not be seen as a hindrance to creative expression or suppression of the freedom of speech that is protected in Article 33, Chapter Four of the Kenyan constitution. Instead, it is a framework that empowers media professionals to contribute positively to society by disseminating accurate, balanced, and responsible content.

The heated debate around TikTok underscores the urgency of such guidelines and responsible digital media practices, not just for TikTok but for all digital media platforms.

By putting together a Code – with contributions from key players, the Council took a necessary and timely step toward instilling this sense of responsibility in the fast-changing digital media landscape.

The Code of Conduct aims to promote self-regulation, professionalism, and ethics in the online space. It also provides a way to protect the rights and interests of digital media consumers, who deserve to access reliable and credible information online.

Code of Conduct Not a Magic Bullet

However, the code of conduct is not a substitute for the legal framework that governs the digital media sector, nor is it a shield against the consequences of violating the law or infringing on the rights of others.

The Code, in this case, is a voluntary and self-imposed guideline that requires the commitment and cooperation of all stakeholders to make it effective and meaningful.

Therefore, it is imperative that all players adhere to the Code. This will not only enhance their credibility and reputation but also foster a culture of trust and respect among themselves and with their audiences. It will equally contribute to the development of a vibrant digital media ecosystem that serves the public interest and promotes democracy.

The MCK has done its part. Now it is up to the digital media practitioners to also do their part.

Jacob Onyango is the managing editor of TUKO.co.ke. He is passionate about shaping ethical online behavior and believes digital media practitioners have the potential to drive positive change in Kenya.

August 24, 2023 0 comments 963 views

Cyber security Technology

LockBit Ransomware Group Expands Operations, Targets macOS Systems

by Brian Yatich June 29, 2023

written by Brian Yatich

LockBit, one of the world’s most notorious ransomware groups, has recently expanded its attacks to target macOS systems, according to cybersecurity experts at Kaspersky.

Known for its relentless attacks on businesses worldwide, LockBit has upgraded its capabilities to maximize the impact of its malicious activities.

Previously, LockBit operated without leak portals, double extortion tactics, or data exfiltration, but it has continuously improved its infrastructure and security measures to fend off various threats.

Analysts have observed that LockBit is now incorporating code from other well-known ransomware groups like BlackMatter and DarkSide. This strategic move not only streamlines its operations but also expands the range of attack vectors employed by LockBit.

Kaspersky’s Threat Attribution Engine (KTAE) has discovered that LockBit has integrated around 25% of the code previously utilized by the now-defunct Conti ransomware gang, resulting in a new variant called LockBit Green.

In a significant finding, Kaspersky researchers have discovered a ZIP file containing LockBit samples specifically designed for multiple architectures, including Apple M1, ARM v6, ARM v7, FreeBSD, and more.

Through analysis and investigation, they have confirmed that these samples originate from the LockBit Linux/ESXi version seen in the past.

Although some samples, like the macOS variant, require additional configuration and lack proper signing, it is evident that LockBit is actively testing its ransomware on various platforms, indicating an imminent expansion of their attacks.

This development highlights the urgent need for robust cybersecurity measures across all platforms and increased awareness within the business community.

LockBit’s continual infrastructure enhancements, combined with the adoption of code from other ransomware groups, present a significant and evolving threat to organizations in various industries.

To mitigate these risks, businesses must reinforce their defenses, regularly update security systems, educate employees on cybersecurity best practices, and establish incident response protocols. This advice comes from Marc Rivero, a senior security researcher at Kaspersky’s Global Research and Analysis Team.

To protect yourself and your business from ransomware attacks, Kaspersky suggests following these rules:

1. Keep all software updated on your devices to prevent vulnerabilities from being exploited.

2. Focus on detecting lateral movements and data leaks to the Internet. Monitor outgoing traffic to identify cybercriminals’ connections to your network. Set up offline backups that cannot be compromised.

3. Activate ransomware protection on all endpoints. Consider using Kaspersky Anti-Ransomware Tool for Business, which shields computers and servers from ransomware and other malware, prevents exploits, and works alongside existing security solutions.

4. Install anti-APT and EDR solutions to enable advanced threat discovery, detection, investigation, and timely incident remediation. Provide your Security Operations Center (SOC) team with access to the latest threat intelligence and regular professional training. Kaspersky Expert Security offers all of these capabilities.

5. Grant your SOC team access to the latest threat intelligence through the Kaspersky Threat Intelligence Portal. This portal provides you with cyberattack data and insights collected by Kaspersky over the past 20 years. To help businesses bolster their defenses, Kaspersky is offering free access to continuously updated, globally sourced information on current cyberattacks and threats. To request access to this offer, go here.

June 29, 2023 0 comments 522 views

Cyber security Tech

Ransomware Persists in MEA Despite Improved Detection in 2022

by Brian Yatich March 21, 2023

written by Brian Yatich

IBM Security’s X-Force Threat Intelligence Index report for 2023 revealed that despite improved detection and prevention methods, ransomware attacks have continued to increase.

The average time for attackers to complete a ransomware attack globally decreased from two months to four days.

The report identified backdoor deployment as the top attack action in the Middle East and Africa (MEA) region, accounting for 27% of cases, and ransomware and worms tied as the second most common attack type, each at 18%.

The finance and insurance sectors were the most targeted industries in the MEA region, accounting for 44% of incidents. The report concluded that companies must prioritize threat intelligence and strengthen their defenses.

The report features data collected by IBM globally in 2022 and can be downloaded from the IBM Security website.

March 21, 2023 0 comments 463 views

Awards & Recognition Cyber security East Africa Technology

Hormuud Receives ISO Certification in Information Security Management System

by Ndungu Brian February 7, 2023

written by Ndungu Brian

Somalia’s telecommunications company Hormuud Telecom has been presented with the international certificate for Information Security Management System by Bureau Veritas. 

The company received the certification following a thorough audit by the accredited Bureau Veritas Group, a global leader in testing, inspection and certification services.

The certification acknowledges that Hormuud meets internationally recognized standards for establishing, implementing, maintaining and continually improving information security management systems.

With this certification, Hormuud is demonstrating its central role in driving up IT security, cybersecurity and privacy protection standards in Somalia.

Speaking on this latest achievement, Hormuud CEO Ahmed Mohamud Yuusuf said:

“Digital is the backbone of the Somali economy. Driving standards – and being recognized for our world-class information security – is crucial for its long-term success.

“We will continue to drive standards in Somalia forward, playing our part in creating an environment that enables businesses to thrive and people to prosper.”

The digital economy is a key driver of growth in Somalia. Over three-quarters of Somalis use EVC Plus, Hormuud’s mobile money service and the country offers some of the cheapest data across Africa. The service has also been found to be an effective solution by International Non-Governmental Organizations (INGOs) for sending aid money to beneficiaries affected by the drought.

With a secure and transparent platform, INGOs are able to quickly distribute funds to those in need, providing critical support in the face of a natural disaster. The INGOs can further ensure that the aid money reaches intended recipients in a timely and efficient manner, maximizing the impact of their relief efforts and helping those affected by the drought to recover as quickly as possible.

Ensuring this crucial digital network is underpinned by rigorous security systems is vital to the long-term prospects of the Somali economy and will aid the country’s ambition to become the digital gateway to the Horn of Africa.

Hormuud now joins a list of global telecommunications companies which have received this award, setting international standards for telecommunications and data-driven industries.

The new certification comes just three months after the Telecom company received the GSMA Mobile Money Certification for its EVC Plus product at the GSMA Mobile World Congress Africa (MWC2022) event in Kigali, Rwanda, in October 2022.

February 7, 2023 0 comments 581 views

Newer Posts

Older Posts