With environmental, social and governance
("ESG") frameworks becoming a critical
aspect of corporate evaluation, cybersecurity has become a key
metric in assessing an organisation's governance.
To bolster their ESG frameworks, South African organisations
should look to fortify their cybersecurity governance processes by
taking note of two key pieces of South African legislation: the
Cybercrimes Act, 2018 ("Cyber Act") and
the Protection of Personal Information Act, 2013
("POPIA").
South Africa is ranked as having the third highest number of cybercrimes
victims worldwide – an issue that costs the country
ZAR2.2-billion a year. Over the past two years, many businesses
have inadvertently opened the door to the murky world of cybercrime
by accelerating their online presence.
