South African military responds to Interpol cyberattack warning

I follow a Cybersecurity expert, based in South Africa who want to do a voluntary disclosure of some issue they have found on Home Affairs' web portal (they did not even do a vuln test, maybe just seeing some misconfigured endpoint ?)
Told her... you are going to get arrested...
Our Country does not have the required departments that can deal with this type of issue.
@Jan dumb question but do we have ANY idea whether these types of issues can be properly reported without repercussion ?
 
The Minister also said her department had put in place several regulatory policy frameworks surrounding cybersecurity, namely:
  • The Department of Defence and Military Veterans’ regulatory policy framework
  • The National Cybersecurity Policy Framework, 2015
  • The Cyber Defence Strategy and Action Plan 2025-2030
  • The First Edition DODPP/00066 2024 Processes and Procedures for Information and Communications Systems Security in the Department of Defence
Click to expand...

I also have a Mybroadband Schitposting Manual For Dummies. Frameworks... lol. I have always been curious about what our DoD procedural plans look like? Frameworks and plans aren't the same thing.

Just to add, I don't think we have a plan. Framework is likely pointing to putting out tenders and sourcing plans within the private sector. How it all comes together, I don't even want to know, because all our politicians care about is making dosh.
 
The scary bit is that the DoD would likely call on "bilateral" aid. We don't tend to respond well to disasters. There are always committees. As sad as it is, they always look to enrich themselves. A potential cyberattack is an opportunity.
 
Any experts here?
Seems a little infrequent, especially seeing how things are being hacked left, right and centre here these days...

“Vulnerability assessments are conducted monthly, and penetration tests are conducted biannually to identify misconfigurations and unpatched systems,” Motshekga said
 
Jam Sandwich said:
Any experts here?
Seems a little infrequent, especially seeing how things are being hacked left, right and centre here these days...

“Vulnerability assessments are conducted monthly, and penetration tests are conducted biannually to identify misconfigurations and unpatched systems,” Motshekga said
Click to expand...
Those are standard practice for external audit passes - they should be doing internal tests / updates more frequently.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X