JEDDAH – The unprecedented impact of digital revolution has changed completely the communication landscape, data transmission and information gathering, with privacy and confidentiality of records prone to hacking and other violations, which led to relentless pursuit of security solutions to protect the unsuspecting parties – whether they be individual persons, establishments, corporations or established institutions. All of them express the greatest concern about the future impact on business from cyber-threats. While companies are preparing for a future with cyber-threats, in some countries IT security has already become the number one problem for businesses. According to a survey conducted by B2B International in conjunction with Kaspersky Lab, companies in Hong Kong, Taiwan and China currently suffer most from cyber-security issues. More than a quarter have been affected in some way. While fixed-line Internet penetration is just below 25 percent, mobile penetration across the Middle East and North Africa region is 85 percent, peaking in the United Arab Emirates at an incredible 267 percent. By contrast, Italy, which has one of the highest rates in Europe, has about 151 percent, according to a 2009 ITU report. However, at the other end of the scale, in Saudi Arabia, businesses do not see cyber-threats as a serious problem, and do not expect any change in the immediate future. Nonetheless, a regional security expert told the Saudi Gazette that one cannot afford to be complacent about security, thinking that solutions are in placed to ward off any cyber threat or imminent attack. Taher Elgamal, Chief Executive Officer, First Information Security (FIS), who was one of the speakers at the recently held “Saudi Arabia CIO Summit 2012”, said nowadays “everything is threatened” owing to rampant growth of cybercriminals. The summit provided a good platform to educate regional CIOs about the strengths and capabilities of the latest technology. He stressed the fact that the availability of infrastructure to thwart malware penetrating the system is not a guarantee that everything would be scot-free. Elgamal, who is a leading Internet security pioneer and cryptographer, told the Gazette that the best protection against these threats is to “be prepared at all times,” noting that new precautions are needed indeed. Asked to elaborate, he said that it is not sufficient to install the physical infrastructure, it should be equally supported with having the right people to man and operate the facilities. He explained that investing in infrastructure should, in the same manner, be reciprocated by investing in people to undergo trainings and acquire the necessary technical knowledge. That is the essence of e-governance, to have the right people manage the technology. About the high costs of adopting the required solutions, Elgamal said, installing the right solutions and investing in people for a secure future, would be economical in the long run. “If an institution or big business fears risking billions (of riyals), then it ought to protect it by investing in millions,” he added, saying that the bottom line is the security and interest of the business or client. He further said that in the case of FIS, a company that offers a a comprehensive range of security services and products that comply with the latest international industry standard requirements, they always demand that a client meets their basic requirements, namely a holder of security standards, for example, it complies with the ISO standard; it employs security officer/s as part of its internal policies; it has relevant trainings; and a monitor network that oversees the entire security system at all times. Again, he emphasized that there is no perfect security solution despite the cutting-edge strategies that organizations employ to enhance IT control without fear of compromising performance and courting risks. “It is an ongoing process,” he declared. – SG/QJM
