Connect with us

News

Cybersecurity Requires Proactive Approach to Succeed – Rommy

Published

on

Kindly share this post

Rommy Okonkwo is the country manager of Check Point Software Technologies, the largest network cyber security vendor globally, providing industry-leading solutions and protecting customers from cyberattacks with an unmatched catch rate of malware and other types of threats. He spoke to chike onwuegbuchi on issues around cybersecurity in Nigeria.

Nigeria’s Cyber Space and Digitization Drives

I want to believe that the government of today and previous governments have made a lot of efforts to put some level of protections in place as a country, because this is what the West has done and will keep advancing.

Obviously, the ‘war’ has gone beyond the physical- it is now cyber war. And I really don’t know any government that is not aware of this, today and does not have plan in place as to how to protect its key infrastructure. When you talk of Nigerian Government, you refer to our defence- areas like the Nigerian Ports Authority (NPA); that is the key revenue streams for the country including the PHCN and a lot of other key government revenue generators.

I am not sure we are where we ought to be as a people or a country, but I know there are plans in place, because the awareness for security keeps growing. I have read an article in the dailies quoting the Vice President, stressing on the need for government institutions and agencies to brace up for cyber security challenges and make sure their environment is protected.

This is the only way that Ministries, Departments and Agencies (MDAs) can function effectively and efficiently. You would agree with me, when downtime occurs, the cost of bringing back the service is usually huge which impacts the revenue (bottom-line). This is where no body wants to be today.

For security, first, you need to have security policies in place for individuals, organisations, agencies, or the government. From the government angle, they need to decide what the security policies should be across board- institutions and parastatals which will be the posture for the whole country. These should be readily available before you start thinking of how to implement them.

Inability of Government to Digitise Critical Infrastructure

Today, the world is a global village, that is basically why you can sit in Nigeria and place an order in the United States and in a couple of days you receive the parcel. This is unlike before. Same concept applies to why you can sit here today and require approaching a telephone service to place a call to your relation abroad. If you ask yourself couple of years back when the world was itching towards ‘connected world’, we thought it was a joke. That has actually come to be today.

Everybody talks about Internet of Things (IoT); this is where everybody is going today- everything is virtually going to be done over the internet. When you talk about the online ‘craze’ is the internet.

Again, we should know that what the government is doing to itself by not getting the key infrastructure connected, are they doing the right/wrong thing. One answer to that is focus. If it is the focus of the government to be focused in her decision-making; to be efficient and productive in her dealings across everything, the government should make sure that her infrastructure are connected, real-time.

First, we are referring to productivity and efficiency. For you to achieve these you have to be proactive. So, I don’t think credence should be given to the government for her inability to bring the critical infrastructure online, real-time. This is what the West has done many years ago and then; if we are still at that point, it means something is wrong somewhere. It implies the technology advisers to the government are not doing what they should do/ or that the government is not passionate about it.

The only thing is that we shall be affected in everything we do. International trade, you cannot do that efficiently, if you are not connected. Therefore, productivity and efficiency are been affected.

Check Point efforts in cybersecurity

What we have done over the years is to create awareness in different industries. Some of the things we are talking about today with regards to the West, have been in existence for years. You will also realise that some others like Nigeria have started to wake up to the realities on ground. The awareness, five years ago, was not as high. But what we did was to prepare the minds of the people, because we have seen the global trends.

Concerning figures, when you come out and say you lost XYZ amount of money, there is likelihood the customers become afraid; that is why when some of them are compromised, they don’t come out publicly to say this is the amount we lost.

All I know today is that banks, institutions and corporations in this country get compromised repeatedly. What they do is to be reactive; some of them don’t act until they are affected. That shouldn’t be the mindset of someone who wants to be effective and productive in his dealings.

What we preach today is to be proactive: be there before any other. Put your house in order before the cyber-criminals get to your place. However, we have seen a change of attitude among some of the players; generally, it is no longer as couple of years back.

Impact of Check Point IT Security Solution on Banking and other industries

The solutions basically ensure that the malware that could let people or cyber-criminals to perpetuate evil within the cyber space are reduced; in fact, completely eliminated. On a scale of ten, I should say eight success rates. Of course, if I tell you today I am going to provide 100% security for institutions then I am lying. They have used our technology, tested it and are convinced. Today, most of the customers act as reference to others. It wasn’t the case five years ago. They have had the look and feel of technology and were convinced.

Key Challenges of Selling IT Security to Government and Enterprises

One thing I have seen repeatedly is lack of awareness. Again, when you talk about awareness in Africa, security awareness and consciousness is not where we want it to be. Another challenge, over the years, is cost. It is a major issue, because security is not something like a server or a hardware that when you mention it to you management, they are seeing the physical server or critical infrastructure that will cost XYZ amount.

Security is more virtual stuff that has to do with licences. So, some people have difficulty justifying the bases or why they need to invest huge amount of money. Some people tend to claim: ‘we have run this business for five to six years without anything happening. How come you wake up one morning and telling us we have to spend this XYZ amount of dollars to just put our house in order?’

So, the chief technology officers (CTO) and chief information officers (CIOs) get stocked. It is a major problem. We have also had instances people walk up to us and say ‘we need help’. Help in what direction? Help us build justification.

Why do we need to make this investment? Truly, cost is an issue, but for people who do not know, you think you are actually saving up money in your organisation by not implementing IT security and not having the right policies in place, but you are actually not in business, that is what is called total cost of ownership.

Have you thought of what happens to you tomorrow; when you are hit by probably a Ransomware attack? The last WannaCry, the whole world shook by the incidence. Remember, Africa never experienced that, but the effect was felt here.

Every CEO rushed to the IT department: are we safe? Are we protected? We are going to see lot more of this happen, because the bad ‘guys’ keep innovating. It is only the people who are not ready that fall victims of these things.

Today, I feel that the major problem is awareness creation; getting people to buy into the cyber security as a global trend. We see IT security issues increase everyday there are different versions. The other time, it was a hotel in Asians. The best thing is for people to come to reality that it has come to stay. It is an African problem- couple of years people were afraid of owing ATM cards, because people might gain access to their PIN and unto their money.

But today, you have realised that if you don’t own an ATM card you would probably find it difficult to operate your account. By the time the environment becomes aware of these things there will be more businesses. It will impact the rate of closure of these businesses.

Aside awareness, knowledge is very key. Knowledge is still very low. Employees within organisations lack good knowledge about cyber security. We have talked about having adequate security policies- if people are not aware that anything like USB drives cannot be used in an organisation, there is no way they can adhere to it.

A visitor from anywhere can come and tell the front desk officer, ‘do you know what I came here for an interview, this is my flash drive can you help me print out the CV? Unknowingly or innocently for the front office person he/she will insert the drive and that could be a source of bridge for the organisation.

So, the knowledge is very important. So, ignorant could be a source of challenge to industries with regards to IT security. People know but they pretend as if they are not aware.

Making Licensing and Renewal Easier for Businesses

For people who know what value is in what they are going for, because what says it all is the value; for instance, the day you make up your mind to buy a smartphone, you know there is a Samsung Note 8, an iPhone 8, you know there is a cost implication. But it depends on what you want to do with the phone.

Some people would prefer to spend $100 and save the stress of buying in the next five years. Some other person says, I will rather prefer to buy $5, but I want to visit the market as often. It is a matter of choice.

The fact is that by the time you go to the market 10-15 times on value of $5, you will realise that the person who took the decision to buy $100 on the same stuff, has saved money more than you.

Remember that each trip you make to the market, there is probably a wear and tear, cost of transportation, risks and other factors. That is how it is for security. It is not that the cost is out of place, but the mind-set of the people that are actually consuming these things. At the end of the day, the day you are breached, the amount of money you will lose is like times three of what you should have spend, coupled with time wasted and the integrity of your organisation is affected. So, all of them put together are part of the cost.

In a nutshell, it is not expensive, but the buying behaviour of the people is what makes it expensive. What we advise is for them to approach it from value point of view.

Protecting Organisations against Attacks like Wannacry among Others

When I mentioned the top three malwares in Nigeria, one of them is Locky. Locky is actually a Ransomware Trojan that targets windows platforms. This malware sends system information to a remote server and receives an encryption key to encrypt files on the infected system.

Furthermore, the malware demands that payment be made in the form of Bitcoins. So, to survive a system reboot it adds a wrong key registry entry. This is what the bad guys do. Now, what we also tell people is, most times organisations say, we have a firewall, but it cannot protect you from Ransomeware attack.

Often time, people mix things up. Firewall is like you and your gateman. When you got to this premises the security man granted you access, but he isn’t aware that upon your drive-in you dropped any bad object here.

He has done his job by clearing you to enter. So, this is actually what happens on the online space. From Check Point point of view, we have security suite that will help organisations sort out these challenges.

We have anti-bots, applications control, our SandBlast Mobile, SMS security apparatuses to weed off SMS/email from people that look familiar but are actually attacks.

We have solutions around these things. What we advise is you buy Check Point technology to protect your systems from these attacks. That’s why I said when you are a leader just continue to be there; you cannot lead a certain industry without innovation, research and development and technological updates. We have solutions across board like the anti-ransomware which is as superb like others we release to the market.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

Binance Alleges Request of $150m Bribe by Some Nigerian Officials

Published

on

Kindly share this post

Tigran Gambaryan, a compliance officer for Binance Holdings Ltd, giant cryptocurrency exchange, has alleged that the company was given 48 hours to make a payment of roughly $150 million in crypto to make its problems in Nigeria go away.

Binance Alleges Request of $150m Bribe by Some Nigerian Officials

Richard Teng,, CEO, Binance Holdings Ltd

Also Richard Teng, chief executive officer of the company, in a recent blog post, confirmed that alleged extortion attempt the company faced in Nigeria.

Teng highlighted the demand for a significant payment to alleviate issues in the country amidst its crackdown on crypto and the devaluation of the naira.

“We were asked for a large payment in Nigeria to make problems there ‘go away’,” Teng stated, underscoring the challenges encountered by the world’s largest cryptocurrency exchange.

He also reiterated Binance’s plea for the release of an employee detained in Nigeria.

But Gambaryan, a compliance officer for Binance said that on a trip to Nigeria in January,,he  received an unsettling message:

The company had 48 hours to make a payment of roughly $150 million in crypto.

Mr. Gambaryan, a former U.S. law enforcement agent, understood the message as a request for a bribe from someone in the Nigerian government, according to five people familiar with the matter and messages reviewed by The New York Times.

He and a group of his Binance colleagues had just met with Nigerian legislators, who accused the company of tax violations and threatened to arrest its employees.

The Binance officials fled Nigeria in a panic. Later that month, Mr. Gambaryan wrote a three-page report describing the payment request and gave it to Binance’s lawyers, two people familiar with the report said.

He also alerted contacts in the Nigerian government, the people said, and recounted the incident to them.

The episode was the backdrop for a second trip to Nigeria that Mr. Gambaryan took in February.

On his return, he and a colleague, Nadeem Anjarwalla, were arrested by the Nigerian authorities, setting off a crisis at Binance.

Mr. Gambaryan has been held in Kuje prison in Nigeria’s capital, Abuja, for the last four weeks, after he was transferred there from a government compound on April 8.

His case is the latest legal headache for Binance, which agreed to a $4.3 billion fine last year to settle charges by the U.S. government that it allowed criminal activity to flourish on its platform. In April, the company’s founder, Changpeng Zhao, was sentenced to four months in prison for his role in those violations.

The Nigerian authorities have charged both Binance and Mr. Gambaryan with tax evasion and money laundering. Binance has denied that Mr. Gambaryan had any “decision-making power” in the company.

“The message from the Nigerian government is clear,” Binance’s chief executive, Richard Teng, wrote in a blog post on Tuesday. “We must detain an innocent, mid-level employee and a former U.S. federal agent, and place him in a dangerous prison in order to control Binance.”

Zakari Mijinyawa, a spokesman for Nigeria’s national security adviser, said in a text that the Nigerian government would make its case “on the strength of the facts and evidence, in accordance with due process.”

“We are confident that Nigeria has a good case,” Mr. Mijinyawa said. “Binance equally will have every opportunity under the rule of law to make its case and see justice delivered.”

In the blog post, Mr. Teng laid out the history of Binance’s engagement with Nigeria, which has become a hot spot for the crypto industry. It has the second-highest rate of crypto adoption in the world behind India, according to Chainalysis, a data firm.

In 2023, Nigerian financial regulators issued a statement directing Binance to stop soliciting investors in Nigeria. Binance halted its advertising in the country and offered to meet with government officials, Mr. Teng said.

But tensions continued to escalate. Over recent months, Nigerian officials have argued that trading on Binance contributed to the collapse of the country’s currency, the naira. And in December, a committee of the Nigerian House of Representatives asked that Binance representatives appear for a hearing.

On Jan. 8, Mr. Gambaryan and a group of Binance employees met with those lawmakers. Soon the meeting turned contentious:

The lawmakers read aloud a list of accusations against Binance, including tax violations.

They also threatened to pursue an arrest warrant for Mr. Teng, the blog post said.

As the Binance employees left the meeting, Mr. Teng wrote, they were approached by “unknown persons” who suggested that they make a payment to settle the allegations. Later, a local lawyer representing Binance spoke with someone purporting to be an agent of the House committee, Mr. Teng wrote.

The purported agent demanded “a significant payment in cryptocurrency to be paid in secret within 48 hours to make these issues go away,” Mr. Teng wrote. The amount was roughly $150 million, four people familiar with the matter said.

“Our team grew increasingly concerned about their safety in Nigeria and immediately departed,” Mr. Teng wrote in his post. “We, of course, declined the payment demand via our counsel, not viewing it to be a legitimate settlement offer.”

After he left Nigeria in January, Mr. Gambaryan discussed the incident with colleagues and circulated his report describing the payment request, two people familiar with the matter said.

Later that month, Mr. Gambaryan began setting up meetings with Nigerian security and financial crimes enforcement officials. At the time, he noted that senior leaders at the financial crimes office were eager to discuss what had happened during the Jan. 8 meeting, a person familiar with the conversations said.

In a text message last month, Dele Oyewale, a spokesman for Economic and Financial Crimes Commission, declined to comment on the payment solicitation.

He did not respond to a request for comment on Monday by New York Times.

In his post on Tuesday, Mr. Teng wrote that Binance had received assurances that Mr. Gambaryan would be safe if he returned to Nigeria.

A company adviser with deep local connections recommended that Binance officials meet with the Nigerian national security adviser’s office, Mr. Teng wrote.

Mr. Gambaryan and Mr. Anjarwalla arrived for that meeting on Feb. 26.

After a couple of hours of discussion, Mr. Teng wrote, a Nigerian financial crimes official took Mr. Gambaryan aside and told him that “everything was progressing well.”

Then different Nigerian officials entered the room, demanding that Binance provide granular information about its users in Nigeria — a request the company was unwilling to meet.

Mr. Gambaryan’s and Mr. Anjarwalla’s passports were confiscated, and the two men were held for three weeks in a secure compound.

On March 22, their lawyers received word that criminal charges were coming.

Mr. Anjarwalla escaped the next day. He left Nigeria and has not spoken publicly since.

Mr. Gambaryan was alone in the compound. Shortly after he arrived, financial crimes officials in Nigeria had sent a note to the U.S. Embassy in Abuja, according to a copy of the message viewed by The Times.

“It is important to emphasize that Mr. Tigran is currently having a discussion with our team and the intent of his stay is purely for the purpose of constructive dialogue,” the letter said. “We assure you that the individual is participating willingly.”

Mr. Gambaryan was soon transferred to Kuje, a notorious facility where the Islamic State staged a prison break in 2022.

A trial was scheduled to begin last Thursday, but the court postponed it until May 17.

 


Kindly share this post
Continue Reading

News

Shell Nigeria Paid $1.09Bn in Taxes, Royalties in 2023

Published

on

Kindly share this post

Shell exclusively paid a total of $1.09 billion in corporate taxes and royalties to the Government of Nigeria last year through the operations of The Shell Petroleum Development Company of Nigeria Ltd (SPDC) and Shell Nigeria Exploration and Production Company of Nigeria Ltd (SNEPCo.)

Shell Nigeria Paid $1.09Bn in Taxes, Royalties in 2023

Mr. Osagie Okunbor ,Managing Director The Shell Petroleum Development Company of Nigeria (SPDC) and  Country Chair of Shell Companies in Nigeria.

The figures, announced in the just published 2023 Shell Briefing Notes, show that SPDC paid $442 million, while SNEPCo remitted $649 million. Similar payments made by the two companies in 2022 amounted to $1.36 billion.

“These payments are Shell exclusive and do not include those made by our partners,” said Osagie Okunbor, managing director and country chair, Shell Companies in Nigeria.

“Shell Companies in Nigeria will continue to contribute to the country’s economic growth through the revenue we generate and the employment opportunities we create by supporting the development of local businesses.”

Shell has invested in Nigeria for more than 60 years. The Briefing Notes report on the progress of the businesses of Shell Companies in Nigeria – SPDC, SNEPCo, Shell Nigeria Gas and Daystar Power for 2023.

The reports show that the companies continued to power progress, working closely with stakeholders and communities to promote socio-economic development and providing cost-effective and cleaner energy solutions.

Mr. Okunbor added: “It is important to emphasise that Shell is not leaving Nigeria and will remain a major partner of the country’s energy sector through its deep-water and integrated gas businesses. Our collective focus remains on delivery of safe operations and care for our people.”

 

 

 

 

 

 


Kindly share this post
Continue Reading

News

What We Can Learn from Africa’s Small Business Success Stories

Published

on

Kindly share this post

By Gerald Maithya, General Manager, Microsoft Africa Transformation Office

Africa is often hailed as the birthplace of some of the world’s most exciting tech startups. From Cape to Cairo, small businesses across the continent have become catalysts for change, helping to drive economic prosperity and leaving their mark on local society. In fact, it’s predicted that Africa’s digital economy, fueled by hundreds of active tech hubs, could contribute nearly $180 billion to the region’s growth by the mid-decade.

Gerald Maithya, General Manager, Microsoft Africa Transformation Office –

Having produced several industry shakers in the fintech space, it’s perhaps not surprising that the continent has become a very attractive option for startup investment. According to BCG, the rate of growth in the number of African startups receiving financial backing between 2015 and 2022 was nearly six times faster than the global average. And during the first nine months of 2023 alone, these tech ventures raised around $1.4 billion.

With SMEs already accounting for up to 90 percent of businesses in Sub-Saharan Africa, much focus is placed on supporting this vital sector of the economy to reach the levels of success we’ve come to associate with Africa’s tenacious startup culture.

The question is – how do we empower the small business down the road to rise to the ranks of a Flutterwave in Nigeria or M-KOPA in Kenya?

The cloud effect

Much of the answer lies with providing these enterprises with the technology they need to drive operational efficiencies and scale their operations. Cloud technology, in the form of Microsoft Azure for example, has played an important part over the years in supporting Flutterwave’s core operations. Now as the company seeks to build on its success it is again looking to the expansion power of the cloud, building its next generation platform on Azure so that it can process high volume payments at scale, while also ensuring a seamless and secure payment experience for its clients.

Kenyan startup, M-KOPA, recently raised $250 million in debt equity. The company, which provides digital financial services to underbanked consumers, also relies heavily on the computing capacity of the cloud. In fact, its ability to process 500 payments per minute makes it possible for the startup to provide 3 million people across Africa with access to essential services such as solar power systems, digital loans, health insurance and smartphones.

Beyond fintech, small businesses are having a transformative impact on other key sectors such as healthcare. And as with Flutterwave and M-KOPA, many of these enterprises have something important in common – the backing of powerful technology.

In South Africa, Omnisient, is helping to elevate crucial decision-making across healthcare systems through a recent partnership with Altron HealthTech. The startup has created a platform that facilitates data collaboration across records and datasets and can securely match anonymised patient information in a safe environment for analysis. This allows Altron’s healthcare partners more insight into disease patterns and can improve treatments and medication efficacy. In the long term, Altron HealthTech hopes to use this information to support the healthcare industry in determining where new clinics, pharmacies and hospitals need to be built.

Another startup leaving its mark in the healthcare space, Zen Dawa, is helping to reimagine pharmaceutical operations across both rural and urban areas of East Africa by creating online access to pharmaceutical offerings as well as financing solutions for small businesses and pharmacy shops. By making use of Microsoft’s robust AI platform built on Azure, the startup is helping to contribute positively to the availability of essential medicines across East Africa.

There are still many questions to be answered, however, when it comes to drawing a larger number of the continent’s SMEs into the digital economy. Africa is still behind other regions in the world when it comes to digital infrastructure coverage, access, and quality. We are also still battling a shortage of skills and inadequate regulatory policy environments. In fact, with just 22 percent of the population online, Sub-Saharan Africa is still the world’s least connected region.

Supercharging Africa’s dynamic startup ecosystem

Addressing these issues will rely in no small part on the development of strategic alliances across both public and private sectors. These collaborations are pivotal to the development of comprehensive solutions to the multi-faceted challenges faced by small businesses in Africa. The FGN-ALAT digital Skillnovation Programme is a great example of this. A partnership between the Federal Government of Nigeria, Wema Bank, Get Funded Africa and Microsoft, the programme aims to train and equip one million micro, small and medium enterprises (MSMEs) across the country by the end of June 2024. Already 350, 000 MSMEs have been impacted.

Beyond skills, these businesses require business mentorship and access to market and finance opportunities – through effective collaboration the initiative aims to address all these needs in a holistic manner, facilitating opportunities, for example, to receive debt financing, equity investment and grants.

And by tapping into the distribution networks of multi-national corporations, the opportunity for strategic alliances to reach vast numbers of SMEs across the continent is significant. A recent partnership between Orange and Microsoft aims to accelerate the digitisation of small businesses in Africa by leveraging the telco’s formidable network to provide SMEs with access to Microsoft solutions such as Microsoft 365, Copilot, Azure, and Dynamics 365.

Similarly, the FAST Accelerator programme, which was launched together by Flapmax and Microsoft, helps startups scale rapidly and access new growth opportunities by bringing together cutting-edge technologies and business development strategies. Accelerators such as these with vast resources at their disposal are experiencing considerable success in helping startups like Zen Dawa to scale. In fact, with the support of the programme, the company now plans to dramatically extend the number of pharmacies it services from 520 to 10,000 by the end of the year.

The more Africa can produce successful collaborations such as these, the more we’ll start to see a greater number of small businesses emerge as powerful economic contributors. These strategic partnerships hold the key to unlocking immense potential across sectors, empowering entrepreneurial ventures to drive new digital solutions to long-standing challenges and creating a ripple effect that reverberates throughout the continent


Kindly share this post
Continue Reading

Trending