Connect with us

E-Business

Concerns over Implementation of National Cyber Security Standard

Published

on

Cybersecurity experts have expressed concerns over delays in the implementation of national cyber security standard already adopted by the country, Nigeria CommunicationsWeek has learnt.

 

This is coming as the date for the implementations European Union Data Protection Regulation (GDPR) is few weeks away.

 

It would be recalled that National Information Technology Development Agency (NITDA), the regulator in this sphere has adopted COBiT 5 as the country’s cyber security standard and has gone further to inaugurate the implementation committee, which is yet to commence work on the process of implementation by both private and public organisations.

 

Ahmed Adesanya, IT Security and Connectivity consultant, expressed concerns over the continued delay in implementation of the adopted framework even as EU’s GDPR is expected to take effect from May 25 this year.

 

According to him, “if we don’t implement our adopted cyber security framework before May 25, organisations in the country will face a huge penalty in the way of fine. Because, all organizations make payments to individuals and corporates based in Europe as such are required to meet up with EU’s GDPR.”

 

He however, urged NITDA to expedite action in implementation of COBiT 5 national cyber security standard.

 

Adesanya added that implementation the standard will assist to secure the country against impending cyber- attacks such as Distributed denial-of-service (DDOS).

 

More so, Microsoft has advised businesses in Nigeria to pay attention to the European Union’s General Data Protection Regulation (GDPR).

 

Mr John Edokpolor, Lead Commercial Attorney, Microsoft MEA Emerging Markets, said that May 25 would be the deadline for compliance with the regulation.

 

According to Edokpolor, failure to adhere to GDPR requirements can prevent trade and other dealings with EU businesses after the deadline.

 

“The new legislation is a milestone on a journey into a new era, where data is the fuel powering companies of all shapes and sizes, from all sectors.

 

” GDPR is a new European law designed to protect the privacy of citizens by setting new standards in terms of how personal data is handled.

 

“” As the law affects any organisation with ties to Europe, it is relevant to businesses around the world,” he said.

 

Edokpolor said that as companies increasingly embraced the cloud, they had an unprecedented ability to capture and store massive amounts of data.

 

He said that advancement in business intelligence technology had given organizations the ability to pull insights from data predictive in nature.

 

“He advised that businesses should be a step ahead of customer expectations and needs, instead of merely reacting to them.

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Alleged Nigerian Hackers Steal from Shipping Firms

Published

on

Nigerian hackers, grouped as Gold Galleon, are menacing shipping firms and bleeding them of thousands of dollars.

 

Network security firm Secureworks has red-flagged the group, whose focus appears solely to be the maritime industry.

 

The group, according to a report by Maritime Executive, an online platform, uses basic email scams and publicly available hacking software to try to steal hundreds of thousands of dollars from unsuspecting ship managers and service providers.

 

Secureworks said Gold Galleon is a group of about 20 individuals who work together to hack maritime firms all over the world using basic techniques.

 

They rent hacking tools for just a few dollars per month; they communicate via Skype; and they identify targets using online company directories and commercially-available contact lists.

 

While the criminal gang uses an online proxy service to disguise its location, several cues indicate that it is of Nigerian origin, Secureworks said.

 

The group communicates in Nigerian Pidgin, an English creole language, and it uses phrases associated with a Nigerian social organization called the “Buccaneeers Confraternity” for usernames and passwords.

 

Once the group has identified a new target, it sends a spearphishing email carefully tailored to the recipient. The email has an attachment containing malware, which deploys on the unsuspecting victim’s computer and logs his or her keystrokes, recording the username and password for the victim’s business email account.

 

Once the account is compromised, the group uses a software tool to collect all the email addresses with which that user has had an interaction, and it sets itself up to intercept business transactions between the user and his or her clients.

 

Many maritime firms use email to handle invoicing and payment details. When the Gold Galleon group sees payment details relayed on an invoice in a compromised email account, it intercepts the invoice, alters the account numbers to direct the money to its own “mule” bank account instead, and uses a similarly-worded email address to send the altered request on its way to the intended recipient.

 

Often, the buyer will not detect the change to the sender’s email address and the bank details, and will simply pay the fraudulent invoice.

 

In one case study, the group was able to steal email usernames and passwords for eight employees at a South Korean shipping firm, including the accountant’s account.

 

Gold Galleon members monitored the company’s financial transactions to gain familiarity with its billing cycles and clients.

 

Then, when the South Korean firm initiated a $50,000 “cash to master” transaction to deliver money to one of its vessels, a Gold Galleon hacker impersonated the recipient and asked for payment to be sent to a “subsidiary account for now” because of unspecified bank issues.

 

Secureworks was monitoring the exchange and notified the parties involved that they were being hacked, and it thwarted two subsequent attempts on the same firm – one for $234,000 and another for $325,000.

Continue Reading

E-Business

HID Global Unveils e-ID Cards to Ease Movements in ECOWAS

Published

on

HID Global®, a worldwide leader in trusted identity solutions, has introduced an end-to-end solution for national e-ID cards that complies with the recommendations provided by the Economic Community of West African States (ECOWAS) as well as all international standards for travel identity documents.

 

The solution gives ECOWAS nations greater options for launching e-ID programs that will enable their citizens to travel easily within this sub-region of Africa.

 

“HID offers government agencies in the ECOWAS region the choice to directly source cards or buy specific components to fulfill their e-ID Card programs,” said Manuel Deloche, Vice President Product Marketing, Citizen ID Solutions with HID Global.

 

“We provide a one-stop shop for everything from polycarbonate inlays and cards to chips and a Common Criteria-certified chip operating system, all aligned with ECOWAS recommendations. HID Global can either support national governments directly or work hand-in-hand with regional partners to ensure a successful project.”

 

Per ECOWAS guidelines, the HID card and inlay options use polycarbonate materials, include an aluminum watermark and are compatible with inductive coupling dual-interface chip technology so there is no physical contact between the card’s module and antenna. HID cards and cards made using HID components have been fully tested against ISO24789 requirements for a minimum 10-year lifespan.

 

HID’s ECOWAS solutions offer the option of including the company’s Mirage™ level 1 security feature. Mirage™ is a 5-in-1 security feature including negative laser engraving, window protection, bi-color metallic effects, customizable design options and a window seal. The bundles also include a Common Criteria-certified SOMATM chip operating system supporting ICAO national e-ID applications, digital signatures, and “match-on-card” capabilities.

 

The ECOWAS national e-ID card initiative spans more than 500 million citizens from the nations of Benin, Burkina Faso, Cape Verde, Cote d’ Ivoire, The Gambia, Ghana, Guinea, Guinea Bissau, Liberia, Mali, Niger, Nigeria, Sierra Leone, Senegal and Togo.

 

Several countries have started their national e-ID implementations and others are expected to initiate programs soon. These programs are aimed at making travel more convenient for citizens while also promoting economic integration among ECOWAS member states.

 

 

 

 

 

 

Continue Reading

E-Business

BetaSMS Unveils Apps to Boost Revenue for Small Business

Published

on

A Lagos-based mobile marketing company, BetaSMS has unveiled a set of industry-leading business-oriented applications – WasherMEN and iPrefect – to help the operators of small and medium scale enterprises in their drive for increased revenue generation.

The applications are designed to increase the productivity of business owners giving them more control, encourage lean operations, reduce overhead costs and generate more profit to keep them in business.

Ajibola Awojobi, Managing Director of BetaSMS, said: “WasherMEN was built after we noticed an increased number of Laundry Start-ups had become increasingly dependent on SMS to notify customers for pick-up of their clothes.

We decided to create more value for such by building the application to ensure smooth running of their businesses.”

On iPerfect, Adebimpe Ayoola, Head, Communications, BetaSMS, said: “We decided to create this solution because of the incessant complaints of missing students’ files and records as well as difficulty in tracking students’ performances and behaviour.

This solution will help keep records for various institutions, simplify the enquiry processes and help instil discipline amongst students.”

WasherMEN is laundry management software designed with the one-man business model in mind but has the capacity to handle both commercial and industrial laundry activities.

iPrefect, on the other hand, is a school automation software built for every educational institute – colleges, universities, training schools- and aims to improve management’s understanding and interaction with students all through their duration in the school while reducing the workforce needed to achieve same. The solution will enable education institutions to perform all activities in the cloud.

Continue Reading

Trending

Copyright © 2017 Communication Week Media Limited.