Name: Tiger IT FY20 Trend
Uploaded: 2021-12-02
Duration: 6 min 13 s
Description: Cyber Security Framework. CYber security PLan 2020 & BEyond.

Scene 1

Cyber Security Framework. CYber security PLan 2020 & BEyond. 

Scene 2

Project Springboard, initiated in October 2017, was the catalyst for  Cyber Security  to be recognized as  a core discipline required by Tiger .We have progressed on an incremental delivery approach targeting the core elements that effectively drives a strong security culture & posture. IT Security, Risk and Governance comprises of a dedicated 3 person team that services Tiger. Below is a timeline depicting the team formation. The cyber security capability is 3 years old and is at an infancy stage.

Cyber Security Breaches & What We Have Learnt

Cyber Security Core Objectives & Framework

The cyber security function  acts as a focal point  in ensuring that: C ritical  Business Capabilities  &  Systems  are  Protected  &  Enabled; C ritical supporting  Infrastructure  is  Secured; and C yber Risks  &  Compliance  needs are adequately  Addressed .

Our Tiger Brands Cyber Security Framework covers a 4 pronged approach:  Identify   Protect  Detect  Respond  Recover.

Our  Lead and Learn mindset  is critical in acknowledging that with an ever evolving security threat landscape, we will continuously learn as we  lead & mature the security capability over time. It is important to note that we have secured cyber insurance for Tiger Brands which was incepted on 17 July 2020!

Insider Threat:  This is about ensuring that legitimate users do not misuse their privileges to commit illegitimate acts (i.e., fraud, etc.).

Ransomware:  This is about being prepared if & when our data & systems are held hostage by attackers in return for cash and / or bitcoins

Data Breach or Information Leak:  This is about knowing when critical data sets are leaked out of the organization and preventing this leakage for malicious gain. This ensures that we act responsibly in looking after the data entrusted to us.

Malware:  This is about making sure that we do not allow unauthorized software to enter our environment, thereby leading to potential infections which could upset the integrity of our data.

Website / Webpage Defacement:  Given our major website presence & given our strategic intention to invest in e-commerce, it is vital that our websites are able to withstand and be resilient against cyber attack & defacement.

Third Party Attack:  Given our strategy to outsource core functions / capabilities where appropriate (e.g., BCX), it is important to understand our third parties security defense mechanisms, otherwise, we could find ourselves becoming a victim of a third party breach.

At Tiger, we care about  anything  that compromises the  Availability,  Accessibility , Integrity & Confidentiality  of our critical Systems, Data & Processes

Make sure that roles & responsibilities are clear Be prepared – its not if, but when the security breach occurs! Concentrate on user awareness & training Make sure everyone understands how the cyber incident response process works Execute regular monitoring & remediate timeously Communicate transparently when there is a breach – be quick, clear & concise Understand your reporting obligations to the various regulators & authorities The above are some of the many reasons cited by regulators, both locally and globally, as to where organisations go wrong in their cyber security priorities…

Considering the micro and macro economic factors which Tiger Brands finds itself in, the following 5 principles have been applied in determining the FY20 and beyond investment decisions: F inish what we started    This means that we conclude the implementations which we have commenced design work on; E nsure that foundational security capabilities are prioritised   This means that we exclude any “wish-list” or “bells and whistles” for now and get the basic security in; Ensure scalability and coverage    This means that whilst we focus on the basics, we must not loose sight of our strategic objectives as a business to be become more agile, innovative and tech savvy. Our implementations must scale for our factory environments in the future; Leverage existing technologies and expand what we have as opposed to getting more in    This means that we will leverage the capabilities we have first, before taking decisions to buy more security technology. New technology will only be considered where the capability at present is absent and it’s a foundational security requirement; and Invest in strong skill sets    Security skills (both in the manufacturing environment and IT) are very rare and hard to come by. A conscious decision around investing in skill sets is required, without picking up critical one man dependencies.

FY20 INITIATIVES IN PROGRESS & ON TRACK Identity & Access Governance (High Level Designs & RFP Appointments)  Privileged Access Management Identity & Access Governance (High Level Designs & RFP Appointments)   Information Security & IT Resilience Maturity Assessment  PoPIA IT implementation OT Security Assessment  MFA Deployment remote execution

FY21 APPROVED  PIPELINE Identity & Access Governance (Implementation)  Privileged Access Management (Implementation)  Managed Security Services & SOC Secure File Transfers OT Security Remediation Multi Factor Authentication( Self Enrollment)

FY22 CONSIDERATIONS  PLANNING IN PROGRESS Data Leakage Prevention  Further OT Remediation  Further OT Assessment  Slightly advancing the IT SOC

All initiatives will be launched through the Tiger wide Programme Vusulela!

Our maturity against the above framework is currently being independently assessed & the results are expected to be finalized by end October 2020.

CYBER SECURTY INCIDENTS. A total number of 787 calls were logged in 2021 compared to the 1,128 logged in 2020.. 

Scene 3

A total number of 787 calls were logged in 2021 compared to the 1,128 logged in 2020.

Calls logged 2020 2021 1128 787 SLA Respond 2020 2021 1128 787 Inc SLA Resolve 2020 2021 1040 750

2020 Jan Feb Mar April May June July Aug Sep Oct Nov Dec 56 118 72 42 99 72 94 74 63 81 154 203 2021 Jan Feb Mar April May June July Aug Sep Oct Nov Dec 87 103 113 75 66 50 50 65 48 84 40

Downwards trend in calls logged year on year.

Significant improvement in Patch & Firmware compliance.

Achieved Server AV Desktop AV & DE Patch & Firmware 1 0.99 0.25 SLA Server AV Desktop AV & DE Patch & Firmware 0.99 0.98 1

Achieved Server AV Desktop AV & DE Patch & Firmware 1 0.98 1 SLA Server AV Desktop AV & DE Patch & Firmware 0.99 0.98 1

Significant increase in Inbound rejections during October (28%). Outbound rejection rate increased slightly during November to 4%.. 

Scene 4

Significant increase in Inbound rejections during October (28%). Outbound rejection rate increased slightly during November to 4%.

Decrease in Unsafe Attachments since September. Impersonation detections decreased slightly.

Inbound Jan Feb Mar Apr May Jun July Aug Sep Oct Nov 1932622 2139000 2125231 2017861 2156938 2221388 2378058 2365604 2402725 2565693 2531800 Outbound Jan Feb Mar Apr May Jun July Aug Sep Oct Nov 731234 1092880 814684 760004 755830 753615 779205 812018 836749 822865 897299 Inbound Reject Jan Feb Mar Apr May Jun July Aug Sep Oct Nov 0.22 0.17 0.16 0.19 0.21 0.21 0.26 0.23 0.22 0.28000000000000003 0.21 Outbound Reject Jan Feb Mar Apr May Jun July Aug Sep Oct Nov 7.0000000000000007E-2 0.06 0.06 0.12 0.04 0.03 0.03 0.03 0.03 0.03 0.04

Tiger IT FY20 Trend

Scene 1 (0s)

Scene 2 (2m 50s)

Scene 3 (4m 37s)

Scene 4 (5m 16s)

Scene 5 (5m 58s)

Scene 6 (6m 6s)