Every so often, cybersecurity analysts warn that we need to create a moat around digital assets.
If we neglect digital security, we stand to suffer losses, some of epic proportions.
World over, governments are targets for cybercrime. Cyberattack is the 21st century’s tactic for sizing-up a country’s security strength.
In fact, how a government guards its digital wealth is a testament to its national security might.
DIGITAL SECURITY
That staff work with the right hardware and software, and are backed by a team of experienced technology-support team.
As much as possible, there should be a clear demarcation between personal online activities such emails and corporate activities.
Unfortunately, however, the largest workforce – government employees— are ill-prepared to transact business on the digital platforms.
They are exposed to cyberattack and in return, expose the government too.
SOFTWARE
Computers running different software or different versions of same software on the same corporate network introduce fault-lines that cyber crooks find and exploit.
Worse, those computers rarely have anti-virus software to protect data from illicit infiltration.
Where the software exists, it is in most cases out-of-date.
It is a common practice within government to use one flash drive to transfer a file from one computer to multiple computers.
EMAILS
It is akin to using one needle to inject multiple patients, effectively transmitting infections.
There is no clear demarcation between personal and official communication. Mails are exchanged through Gmail and Yahoo email accounts.
Transacting government business using personal resources such as personal email accounts is a bad business practice.
When an employee is hired, he is supposed to receive tools to work with.
The government, however, because it does not have a supportive email infrastructure, allows its workers to use their personal resources.
WHISTLE -BLOWER
But because staff use their personal emails, the government has no business enforcing secure email policies, such as a strong password.
The result is that sensitive documents and privileged government information is lying in thousands or probably millions of personal computers and emails.
When people leave government employment, they go away with all this information. It is partly the reason why it is nearly impossible to stop leakage of privileged government information.
Staff are never trained on how to protect their digital devices or information transmitted or maintained on those computers, tablets and mobile phones.
To defend Kenya from vicious online attacks, time is running out for the government to institute a ring of protection of its digital systems.
