Rwanda: Institutions Fight Cyber Attacks

[InfoSec News <alerts () infosecnews org>]

http://allafrica.com/stories/201203180246.html

By Frank Kanyesigye
The New Times
18 March 2012

Following recent cyber-attacks that have been targeting East African 
companies, several institutions in the country have put in place 
security policies to counter them.

Speaking to Sunday Times, Innocent Muhizi, the Head of Information 
Technology (IT) at Commercial Bank of Rwanda (BCR), said his institution 
had set up security measures to prevent information leak to hackers.

"We have employed world renowned security solutions provider,VeriSign, 
to protect our clients' information using online banking," he revealed

Sammy Kioko, the Alliance Manager, Cyber Security Africa, said 
information leak was unacceptable in today's globalised digital economy.

"An information leak within a company often indicates that security 
measures were not implemented," he added.

Kioko who is an expert in cyber security, observed that the ISO 27001, 
the international best practise for an Information Security Management 
System (ISMS), was needed to control information security within the 
context of an organisation's overall business risks.

"The ISMS is suitable for large and small companies. The standard is 
particularly recommended in situations where protection of information 
assets is critical, such as financial and banking, manufacturing and 
government sectors," he explained.

"Currently, there are 10 companies in Africa that have so far been ISO 
27001 certified and less than 20 companies from both Africa and the 
Middle East versus 3,274 entities worldwide. With none in Eastern, 
Central and Horn of Africa, it takes at least two years for companies to 
prepare themselves for the certification process."

Rwanda on March 23rd, 2012 will host a Cyber Security Africa conference.

[...]


______________________________________________________________________________
CISSP and CEH training with Expanding Security is the fastest, easiest way
to grock the relevant data you need now.   A free class invite is in every
PainPill.  Sign up for the free weekly PainPill .  It's that easy.
http://www.expandingsecurity.com/PainPill