Connect with us
Anglostratits

Business

Beware the Bring Your Own Device (BYOD) blind spot: Personal devices are a complicated weak link

Published

5 months ago

on

KnowBe4

Up to 84% of organisations globally practise bring your own device (BYOD) in some form, but only half of them officially allow it, according to a recent report (https://apo-opa.co/498rnlG). While the convenience and cost saving of employees’ using their own personal devices for work is undeniable, there are many security risks involved too, particularly in hybrid and remote work environments, asserts Anna Collard from KnowBe4 Africa (www.KnowBe4.com).

It’s becoming increasingly common for organisations to expect employees to use their own personal devices for work, such as smartphones, tablets and laptops, and employees seem to prefer the level of freedom it gives them (https://apo-opa.co/3JfJ8Vx). From an organisational perspective, they stand to save an average of R5 000 per employee every year (https://apo-opa.co/47cbQPa) if their employees use just their own mobile devices, with two-thirds reporting that it boosts their productivity (https://apo-opa.co/47wWjL7).

In South Africa, this trend has also become ubiquitous. “BYOD, particularly with smartphones having access to corporate email accounts, has become the norm for a lot of South African organisations for many years already,” asserts Anna Collard, SVP Content Strategy and Evangelist at KnowBe4 Africa.

“While organisations in the financial services sector will have stricter policies, many start-ups, SMEs and even some larger organisations often allow, or even expect, employees to use their own phones and laptops, sometimes without formal policies in place.”

While flexible and convenient, she believes this informal approach introduces significant cyber and compliance risks. The new KnowBe4 Africa Human Risk Management Report 2025 (https://apo-opa.co/3WzbdKR) highlights that up to 80% of employees in Africa use personal devices for work, with broader studies finding 70% of these devices are unmanaged – a critical blind spot for many organisations.

BYOD blind spots

The most notable cybersecurity risk associated with BYOD is data leakage. “Personal devices can easily leak sensitive data through unsecured apps, cloud storage or public Wi-Fi,” she explains. “Without proper controls, even a misplaced phone can become a breach vector (https://apo-opa.co/3Wzbeyp).”

Another security blind spot is employees downloading malicious apps. “Employees may unknowingly install apps that contain malware,” Collard comments. “Some apps mimic legitimate ones (https://apo-opa.co/48zCF2b), but secretly harvest data or open backdoors into corporate systems.” This also extends to “shadow IT” – the use of unapproved applications or services – which can proliferate via personal devices, creating unmonitored entry points for attackers.

Organisations must have a clear, communicated BYOD policy – what’s allowed, what’s not and what minimum protection is expected

A further risk is outdated software. “Personal devices may run outdated operating systems or apps, making them vulnerable to known exploits,” she says. “IT teams often lack visibility to patch non-managed devices, and a large percentage of people have ‘an update is ready to be installed on your device’-notifications that have been hanging around for ages; unactioned.”

In addition, many employees may have a false sense of security about their phone or laptop, especially since almost half of Gen Z respondents (48%) take cybersecurity protection on their personal devices more seriously than on their work devices, according to an Ernst & Young survey in the US (https://apo-opa.co/48FeM9o). “Just because it’s my device doesn’t mean it’s secure for sensitive work data,” stresses Collard. “A weak BYOD policy opens the door to data leaks, shadow IT and insider risk.”

What organisations should do

In order to mitigate these risks, organisations need to come up with a robust BYOD policy. “It starts with policy and awareness (https://apo-opa.co/4ooJBnf),” she states. “Organisations must have a clear, communicated BYOD policy – what’s allowed, what’s not and what minimum protection is expected.”

Some useful technical controls include employees having strong passwords, multifactor authentication (MFA), encryption, endpoint security and patching. Organisations can also segment their networks to isolate personal devices from critical corporate assets. “Mobile Device Management (MDM) tools can enforce some controls,” concedes Collard, “but they can’t replace human vigilance.”

She is a firm advocate of security awareness training to heighten awareness of cybersecurity risks, especially among younger employees who are more likely to use the same passwords for their personal and professional accounts (https://apo-opa.co/48FeM9o). “Organisations need to educate employees on the specific risks of BYOD, beyond  ‘don’t click links’,” she says. This is crucial, as 96% of organisations believe (https://apo-opa.co/48FeM9o) their employees might fall for more attacks in the future due to AI use by bad actors. The KnowBe4 Africa Human Risk Management Report 2025 (https://apo-opa.co/3WzbdKR) further highlights that AI policy remains a governance blind spot in many organisations, with 46% still developing formal AI policies – making employee education on AI-related BYOD risks even more critical.

“Organisations can simulate attacks (https://apo-opa.co/4oy3AQO) that leverage BYOD vulnerabilities, such as phishing specific to mobile apps, while fostering a culture where employees feel comfortable reporting potential incidents on personal devices without fear of reprisal.”

Alongside security training, Collard is an advocate of digital mindfulness, which she describes as an important  weapon against cybersecurity threats. “Being digitally mindful helps employees slow down, become aware of risky moments and question suspicious behaviour, especially on personal devices,” she says.

Managing the human element

Even though privately-owned devices may appear to be the problem, managing the human element is absolutely key in mitigating BYOD security risks. “A device is just a tool; what matters is how we use it,” Collard emphasises. “You can have the most secure set-up, but if someone is rushed, tired or emotionally triggered, they’re more likely to click on a malicious link or fall for a scam.”

She is adamant that organisations need to train their employees’ attention and awareness to build resilience, not just rely on tools. “Ultimately, it’s a combination of the right technology and human vigilance,” she concludes.

Distributed by APO Group on behalf of KnowBe4.

Home  Facebook

Related Topics:
Continue Reading
Advertisement

Energy

High-Level Minister Roundup to Headline African Energy Week 2026

Published

1 day ago

on

March 20, 2026

By

African Energy Chamber

African Energy Week 2026 will convene ministers from Algeria, Ghana, Senegal, Zambia and Niger to spotlight oil, gas expansion, reforms and investment opportunities continentwide

CAPE TOWN, South Africa, March 13, 2026/APO Group/ –A high-level ministerial roundup will take center stage at this year’s African Energy Week (AEW) 2026 – taking place in Cape Town from 12–16 October –, convening some of the continent’s most influential energy leaders at a defining moment for Africa’s oil, gas and power sectors. As hydrocarbon expansion converges with accelerating energy transition strategies, the gathering is set to spotlight real-time project execution, regulatory reform and cross-border infrastructure that are actively reshaping Africa’s energy future.

 

Confirmed ministers to date include Algeria’s Minister of Energy and Renewable Energies Mourad Adjal, Ghana’s Minister for Energy and Green Transition Dr. John Abdulai Jinapor, Senegal’s Minister of Energy, Petroleum and Mines Birame Soulèye Diop, Zambia’s Minister of Energy Makozo Chikote and Niger’s Minster of Petroleum Hamadou Tinni.

 

Fresh from a March OPEC+ decision to lift output to 977,000 barrels of oil per day (bpd), Algeria enters AEW 2026 amid a $60 billion sector transformation. The country is also advancing a 500-well exploration drive and accelerating its 1.48 GW “Project of the Century” solar rollout. Gas exports to Europe remains central to the country, supported by hydrogen corridor planning and refinery expansion aimed at boosting capacity to 50 million tons by 2029.

 

Following license extension for Jubilee and TEN to 2040 and the late-2025 restart of the Tema Oil Refinery, Ghana is pushing a $3.5 billion upstream reinvestment plan while settling $500 million in gas arrears. A 1,200 MW state thermal plant and expanded gas processing at Atuabo anchor its gas-to-power shift, alongside a renewed upstream push in the Voltaian Basin.

The participation of these distinguished ministers underscores the scale of opportunity unfolding across Africa’s energy landscape and the urgency of aligning policy with capital

 

Senegal’s delegation comes on the back of strong production momentum, with the Sangomar oil field delivering 36.1 million barrels in 2025, outperforming forecasts, while the Greater Tortue Ahmeyim LNG development ramped up to 2.9 million tons per annum following first gas. Dakar is now prioritizing domestic gas through refinery upgrades at the SAR refinery and preparations for Sangomar Phase 2 to push output beyond 100,000 bpd.

 

Zambia is redefining its power mix after drought-induced hydro shortfalls. New solar capacity – including the 200 MW Chisamba expansion and 136 MW Itimpi Phase 2 – is part of a broader 2,500 MW diversification drive. Cabinet has approved major regional fuel pipelines, while the Energy Single Licensing System fast-tracks approvals. Lusaka targets 10 GW generation by 2030, with solar and wind rising to one-third of supply.

Niger’s presence reflects its emergence as a serious oil exporter, with the fully operational 1,950-km Niger-Benin pipeline now moving up to 90,000 bpd to international markets. Alongside uranium expansion and renewed cooperation with Algeria on upstream assets, Niamey is advancing digital oversight reforms and reinforcing energy sovereignty amid evolving geopolitical dynamics.

 

“The participation of these distinguished ministers underscores the scale of opportunity unfolding across Africa’s energy landscape and the urgency of aligning policy with capital,” says NJ Ayuk, Executive Chairman, African Energy Chamber. “Their leadership reflects a continent moving decisively from strategy to execution, creating a platform where investors can engage directly with the policymakers shaping Africa’s next wave of oil, gas and energy growth.”

 

At AEW 2026, this ministerial cohort will be well-positioned to offer investors direct insight into Africa’s most dynamic energy markets – where new barrels, new pipelines and new megawatts are reshaping regional growth trajectories in real time.

Distributed by APO Group on behalf of African Energy Chamber.

Continue Reading

Business

Enlit Africa 2026 Programme: 280+ speakers, African nuclear 2.0, Bruce Whitfield Business Breakfast

Published

1 day ago

on

March 20, 2026

By

Enlit Africa

The event, taking place 19-21 May 2026 at the Cape Town International Convention Centre, expects 7,200+ attendees and 250+ exhibitors, making it Africa’s largest gathering of energy and water professionals

CAPE TOWN, South Africa, March 12, 2026/APO Group/ –Enlit Africa (https://apo-opa.co/4cEX08g) has released its full 2026 conference programme, featuring 280+ speakers across 8 specialised tracks including a new African Nuclear 2.0 session covering Koeberg’s 20-year life extension and Ghana’s nuclear vendor selection process.

 

The event, taking place 19-21 May 2026 at the Cape Town International Convention Centre, expects 7,200+ attendees and 250+ exhibitors, making it Africa’s largest gathering of energy and water professionals.

Award-winning business journalist and best-selling author Bruce Whitfield will deliver the opening address at the Project & Investment Network Business Breakfast on 19 May, kicking off three days of strategic sessions, deal-making platforms, and technical masterclasses.

New programme content includes:

African Nuclear 2.0 – A dedicated session examining the transition from planning to execution, featuring:

Koeberg Nuclear Power Station’s successful 20-year life extension (Units 1 and 2 now licensed until 2044/2045)

Ghana’s progression to Phase 3 of its nuclear programme, evaluating US, Chinese, and Russian technology bids

West African Power Pool‘s 10 GW regional nuclear capacity target

Small Modular Reactor (SMR) deployment readiness across African grids

Independent Transmission Projects (ITP) – A new session exploring how private investment is unlocking Africa’s transmission bottleneck, featuring global case studies from India’s PowerGrid and lessons for scaling grid capacity across the continent.

Generation Masterclasses – Five interactive roundtables on gas-to-power, nuclear, hydro power, clean coal, and hydrogen.

AI in Africa’s Power Grid – Examining practical deployment realities, real-time analytics, and predictive maintenance applications already in operation across African utilities.

Conference sessions and technical hub sessions on the expo floor are CPD-accredited by the South African Institute of Electrical Engineers (SAIEE) and the South African Institution of Civil Engineering (SAICE).

Co-located platforms:

Water Security Africa features country playbooks from Namibia (55-year potable reuse programme), Uganda (NRW reduction from 42% to 32%), Cape Town (Day Zero recovery strategies), and sector-specific stewardship sessions with Harmony Gold, Heineken, Mediclinic, and Growthpoint Properties.

Project & Investment Network (P&IN), part of the new Level 2 Executive Experience, connects project developers, investors, African utility CEOs, and DFIs through structured matchmaking, ministerial dialogues, and project briefings. Over the past two years, P&IN has facilitated $3 billion in project pitches.

Utility CEO Forum brings together 35+ confirmed utility CEOs under Chatham House Rule for candid, off-the-record strategic discussions on unbundling, prosumer management, and financial sustainability.

Municipal Forum addresses South African municipalities’ distribution, metering, and revenue challenges, including sessions on NRW management, tariff reform, Cost of Supply studies, and electrifying informal settlements.

Technical Hub sessions on the exhibition floor offer free, CPD-accredited training across Power, Renewable Energy & Storage, and Water tracks, with confirmed speakers from Eskom, ENGIE SA, ACTOM, National Transmission Company South Africa (NTCSA), RenEnergy, and Matla Energy.

Site visits on 22 May include Koeberg Nuclear Power Station and the V&A Waterfront desalination plant.

Pass options:
Free expo pass registration: https://apo-opa.co/4bl2bYu

Free expo passes provide access to 250+ exhibitors and CPD-accredited Technical Hub sessions.

Delegate Pass:
Early bird registration closes 3 April 2026. Delegate passes start at R15,100 (Silver), with P&IN Executive passes at R32,000 including access to the Bruce Whitfield breakfast, Level 2 executive lounge, and investor matchmaking.

Download the full programme: https://apo-opa.co/3NwCble

Register: https://apo-opa.co/4cEX08g

Distributed by APO Group on behalf of VUKA Group.

Continue Reading

Business

Binance Secures Second Major Legal Victory in U.S. Court Under Anti-Terrorism Act in Two Weeks

Published

1 day ago

on

March 20, 2026

By

Binance

US Federal Court in Alabama Dismisses All Claims Against Binance in Latest Lawsuit Victory

JOHANNESBURG, South Africa, March 12, 2026/APO Group/ –Binance (www.Binance.com), the world’s largest cryptocurrency exchange, announced today that a U.S. federal court in Alabama has dismissed all claims against the company in a lawsuit alleging violations of the Anti-Terrorism Act (ATA). This marks Binance’s second major legal victory in an  ATA matter within one week, following their victory in the Southern District of New York.

A Full and Complete Legal Victory

In a detailed 19-page ruling, the Court found the plaintiffs’ complaint to be legally and factually deficient. The court’s decision to dismiss every claim across the board represents a decisive legal victory for Binance.

Sanctions compliance and terrorism financing are serious matters of law – they require evidence, legal rigour, and due process

The judge described the filing as a “shotgun pleading.” The complaint failed to clearly specify the claims and improperly grouped all defendants together without distinguishing individual conduct or liability. The ruling also emphasized that the plaintiffs did not meet the basic pleading standard to provide a “short and plain statement” of their claims.

Following the ruling, the court granted the plaintiffs until April 10, 2026, to file an amended complaint addressing the deficiencies identified. However, the judge warned that failure to adequately address these issues would result in dismissal of the entire case.

Building on Momentum and Upholding Legal Integrity

“This decision reinforces our unwavering commitment to protecting Binance and our community from unsubstantiated and bad-faith lawsuits,” shared Eleanor Hughes, General Counsel at Binance. “Sanctions compliance and terrorism financing are serious matters of law – they require evidence, legal rigour, and due process. Courts have now examined these claims on two separate occasions and found them to be without merit. These outcomes speak for themselves. We will not tolerate attempts to misuse the legal system to target our industry, and we remain as committed as ever to transparency, security, and lawful conduct in everything we do”.

This latest decision follows closely on the heels of Binance’s comprehensive victory in New York (https://apo-opa.co/46Xg0ev), where the Court similarly rejected allegations that the company assisted, participated in, or conspired with terrorists. Together, these rulings reflect Binance’s strong resolve to protect its platform and community.

Binance has consistently invested in industry-leading compliance infrastructure, regulatory engagement, and legal governance. The company will continue to vigorously defend itself against any attempts to bring unfounded claims or misrepresent its operations.

Distributed by APO Group on behalf of Binance.

Continue Reading

Trending