Wayne D’sa, CipherWave. Photo: Karolina Komendera

The risks include system vulnerabilities, endpoint user errors, and cyber attacks. The first of these needs to be handled by the IT department, while the second can be mitigated by staff training and awareness programmes. As for cyber attacks, these will only be successful if there are human and technical weaknesses.

For Bethwel Opil, enterprise client lead at Kaspersky in Africa, experience in penetrating IT systems and manipulating staff is what gives attackers the edge.