The President of the Cyber Security Experts Association of Nigeria (CSEAN), Mr. Remi Afon has highlighted some counter measures that can be leveraged to tame the menace of cybersecurity in Nigeria and indeed Africa.
Specifically, Afon highlighted that there user awareness strategies that organisations can use, some of which include training employees on how to identify phishing attempts and signs of BEC; testing the effectiveness of the training by performing social engineering tests on a regular basis.
Others are measuring results of the social engineering tests over time to both track improvement metrics and identify. He also stated there are some technical controls such as Sender Policy Framework), Domain Keys Identified Mail and Domain-based Message Authentication, Reporting and Conformance.
“There are technical control measures such as machine learning technology to protect the organization’s domain from being spoofed. Apply warnings to email messages originating from outside the organization, enable two-factor authentications for the organisation’s email system to establish another layer of defense if login credentials are compromised; incorporate third-party tools and techniques to help users more easily identify and report phishing emails,” he said.
In terms of administrative control, apply warnings to email messages originating from outside the organization and implement financial security controls and policy around the wiring of company funds, e.g., an employee must call to confirm changes to wire transfers.