By Cyber Era Staff
The COVID-19 pandemic has fundamentally changed how people live, work and approach security, and 24 per cent of the respondents indicated that they were affected by cybercrime while working from home.
Sixty-seven percent of those surveyed use their smartphones on a regular basis for both payments and mobile banking.
The number of people concerned about cybercrime has risen to 48 per cent (from 38% in 2019).
The 2020 KnowBe4 African Report collated insights from 881 respondents across South Africa, Kenya, Nigeria, Ghana, Egypt, Morocco, Mauritius and Botswana to discover how the continent views cybersecurity and its risks in a world shaped by a global pandemic. The report found that attitudes and behaviours had shifted as a result of the pandemic, but problem pockets of risk remain that need to be addressed in order to ensure both business and individual security.
“Nearly 50 per cent of the respondents will continue to work from home; 24 per cent indicated that they were affected by cybercrime while working from home, and only 30 per cent believed that their governments prioritised cybersecurity in their policies,” says SVP of content strategy and evangelist, KnowBe4 Africa, Anna Collard. “This year, respondents were even more concerned about cybercrime compared with 2019, with the number rising by 10 per cent to 47.61 per cent. Across all eight countries, there’s a growing awareness of the risks that come with cybercrime.”
However, people are still taking unnecessary risks. Around 63.98 per cent would give away their personal information if they believed that there was a need for it, or if they understood what it was being used for, which is a measured response in light of government and organisation requests for data to verify identity. However, the concern lies in the 7 per cent who would give away personal information if they got something back in return, like a discount, and the 6 per cent who do it all the time.
This is supported by the fact that only 46 per cent could define ransomware, nearly 20 per cent have forwarded a spam or hoax email, 30 per cent have clicked on a phishing email, 33.41 per cent have fallen for a con artist or a scam, and 52.7 per cent have had a virus on their PC.
“In South Africa, a worrying 31.5 per cent thought that a Trojan virus encrypts files and demands payments, highlighting the need for training and education; especially considering that 40 per cent of respondents think they would comfortably recognise a security threat if they saw one,” says Collard. “Most people don’t realise what a risky email looks like or how their actions could result in their systems becoming infected.”
Email security is one of the biggest threats facing the average user, both at work and at home, and it is one of the most common communication methods – nearly 87 per cent use email for work, closely followed by WhatsApp at 85 per cent. For their private lives, WhatsApp is the most popular communication channel on the continent, with 96 per cent of respondents chatting on it with their friends and families. Seventy-seven percent reported the pandemic changed the way they work, with more than 50 per cent changing this for the foreseeable future.
“For organisations, it has become critical that they train employees on security best practices and the various methodologies used by cybercriminals,” concludes Collard. “People need more help in learning about cyber threats, especially since 50 per cent are continuing to work from home. Employee training is one of the most important defence mechanisms – employees need to learn how to spot social engineering and phishing attacks, understand why weak passwords put them at risk, and how multi-factor authentication works. They should also learn how to protect their home networks and what to do in the event of a security incident.”
Education and awareness have become key in protecting people and organisations from the cybersecurity risks out there, especially as many continue to work from home. For businesses looking to remain alert and minimise the human risk in cybersecurity, training and awareness are the best first steps to supporting employees and embedding a culture of security within the organisation.