Connect with us
Anglostratits

Business

The rise of the “shadow employee”: When ex-employees still have access

Published

on

KnowBe4

According to a recent study, 89% of former employees keep valid logins, while 45% retain access to confidential data after departure

JOHANNESBURG, South Africa, October 6, 2025/APO Group/ —Imagine a marketing manager who left a company six months ago, taking their personal laptop with them. On it, unbeknownst to anyone, was a cached login to a shared cloud drive containing sensitive client proposals and campaign strategies – access that was simply overlooked during offboarding. Months later, the ex-employee accidentally drags a folder from that shared drive onto a public-facing personal cloud storage, thinking it was their own. The link to this inadvertently exposed data is then discovered by a competitor or a data broker, leading to a massive leak of proprietary information, significant reputational damage, and a loss of client trust. This seemingly innocuous oversight, can spiral into a devastating corporate crisis. While this scenario is a little extreme, it is unfortunately not far-fetched in today’s complex digital landscape.

When an employee leaves an organisation, most leaders focus on succession, handovers and HR paperwork. But behind the scenes, another risk often goes unchecked: the “shadow employee”. Retaining access to company systems long after they’ve left, these ex-staff members pose a serious cybersecurity threat that can lead to data breaches, financial loss and reputational damage – even if everyone parted ways with smiles, hugs and pizza.

According to a recent study (https://apo-opa.co/46SOBcD), 89% of former employees keep valid logins, while 45% retain access to confidential data after departure. Most disturbingly, almost half admitted to continuing to access company systems after leaving.

“The shadow employee phenomenon is more common than many realise, particularly in organisations with high staff turnover or fragmented and cloud based systems,” asserts Anna Collard, SVP Content Strategy and Evangelist at KnowBe4 Africa (www.KnowBe4.com).

She says it often goes undetected because access management tends to focus more on onboarding than offboarding. “When IT and HR operate in silos or access isn’t centrally tracked, it’s easy for credentials, third-party accounts or shadow IT tools to be overlooked,” Collard comments. “It shouldn’t be seen as just a technical issue; it’s a human one, too (https://apo-opa.co/3IwpyUX), where attention to digital hygiene and processes are lacking.”

Risks of rogue access

The threat of shadow employees was brought into sharp focus in 2023 when a US company suffered a major data leak traced back to a former IT consultant (https://apo-opa.co/46TXYc2) whose access to internal drives was never revoked. The incident exposed client information and resulted in a six-figure (dollar denominated, no less) settlement on top of contract losses.

As the workplace becomes more hybrid and decentralised, organisations must rethink offboarding as a critical component of cybersecurity hygiene

“The risks are serious and multifaceted,” states Collard. “They encompass operational risk, reputational risk and financial risk.” In terms of operational risks, she explains that outdated access rights can disrupt workflows, expose sensitive information or allow unauthorised changes to systems – even inadvertently.

Regarding reputational risk, a data breach caused by a former staff member can erode customer trust and damage brand credibility. “Ex-employees with active credentials can intentionally or unintentionally cause data breaches, leak sensitive information, manipulate internal systems or impersonate staff,” she says.

“In some cases, disgruntled employees may delete or sabotage critical data,” she elaborates. “Even if there’s no malicious intent, the mere presence of active credentials outside of an organisation’s control creates vulnerabilities that threat actors can exploit, especially through credential stuffing or phishing (https://apo-opa.co/46V077s).”

The last risk to organisations involves financial risk. “Rogue access can result in regulatory fines, legal costs (https://apo-opa.co/48iKWHK) and lost revenue,” she says. The reason why these security breaches occur is that many organisations treat offboarding as an almost “optional HR thing”, not a cybersecurity event. “They fail to conduct thorough access audits or delay revoking credentials across all systems, especially cloud platforms, collaboration tools and unmanaged software-as-a-service (SaaS) applications,” argues Collard.

Why robust offboarding is key

To close the loop and reduce the shadow employee threat, organisations must build strong offboarding processes that bridge HR and cybersecurity. “It starts with a shared mindset: offboarding must be seen as a collaborative security process, not just an admin task,” she comments.

Another important step is to automate deprovisioning to revoke access in real-time. “Integrating identity and access management (IAM) tools and involving security or risk teams in offboarding governance can also help,” she says. Other action items include performing regular access reviews to identify dormant or unauthorised accounts and educating managers to close the gap on shadow IT.

“Make line managers accountable for flagging all tools and systems used by exiting staff and track unofficial tools in your access control system,” she recommends. The HRM Report (https://apo-opa.co/46YnUn3) also noted that “Shadow AI” use is a growing concern across Africa, with 46% of organisations still developing formal AI policies while staff increasingly use generative AI from work networks without checks on credentials or information sharing. This lack of governance around new technologies further underscores the need for robust offboarding processes that account for all forms of access, not just traditional systems.

In conclusion, Collard maintains that former employees shouldn’t keep the digital keys to your organisation’s kingdom. “As the workplace becomes more hybrid and decentralised, organisations must rethink offboarding as a critical component of cybersecurity hygiene,” she emphasises.

Distributed by APO Group on behalf of KnowBe4.

Business

African Petroleum Producers’ Organization (APPO) Chief Ghezali to Bring Pan-African Energy Perspective to Libya Energy & Economic Summit (LEES) 2027

Published

on

Etu Energias

APPO Secretary General Farid Ghezali will join government, industry and investment leaders in Tripoli as Libya targets higher oil and gas production and seeks to attract new capital into its upstream sector

TRIPOLI, Libya, September 2, 2026/APO Group/ –Farid Ghezali, Secretary General of the African Petroleum Producers’ Organization (APPO), will speak at the Libya Energy & Economic Summit (LEES) 2027, taking place January 23–25 in Tripoli, adding a senior continental voice to discussions on the country’s next phase of energy development.
 




 

The announcement comes as Libya seeks to raise oil and gas production and attract new investment across its upstream sector. The National Oil Corporation (NOC) reported crude output of 1.44 million barrels per day (bpd) in June 2026, while targeting 1.5 million bpd in the near term and 2 million bpd over the longer term. Meeting these targets will require further investment in exploration, field development, infrastructure and production capacity.

Against this backdrop, Ghezali’s participation at LEES 2027 will bring a pan-African perspective to the event, with the organization representing African oil-producing countries and promoting cooperation on petroleum policy, investment, technology, capacity building and the development of the continent’s hydrocarbon resources.

His participation also comes as APPO’s engagement with Libya deepens. Tripoli hosted the organization’s 2026 Training Officials Forum, reinforcing Libya’s role in continental energy cooperation. At LEES 2027, Ghezali will contribute to discussions examining how Libya can translate its resource base and production ambitions into new investment, partnerships and energy-sector growth.

The fifth edition of LEES will bring together governments, national oil companies, international operators, investors and service companies to explore opportunities across Libya’s oil and gas sector, alongside power and renewable energy. With Libya seeking to expand production while attracting the capital and technical expertise required to unlock new resources, the summit will provide a platform for dialogue between African producers and the international investment community.

Distributed by APO Group on behalf of Energy Capital & Power.

 




 

Continue Reading

Energy

Oil & Gas Arbitration in Africa Moves Up the Investor Agenda at African Energy Week (AEW) 2026

Published

on

African Energy Chamber

A dedicated Upstream E&P Forum panel will examine how resource nationalism, ESG requirements and geopolitical disruption are reshaping dispute resolution across Africa’s oil and gas sector

CAPE TOWN, South Africa, September 2, 2026/APO Group/ –As African governments seek greater state participation, higher local content and a larger share of resource revenues, the terms governing oil and gas investments are changing across the continent. Since 2014, 31 African countries have reformed their mining and petroleum codes, creating new commercial and regulatory considerations for international investors. The resulting environment is placing greater emphasis on how upstream agreements anticipate regulatory change, protect investments and resolve disputes when commercial assumptions shift.
 




 

African Energy Week (AEW) 2026, taking place October 12–16 in Cape Town, will bring this issue into focus through a dedicated session at the Upstream E&P Forum: Resource Nationalism, ESG and Investor Protection: The New Frontier of Oil and Gas Arbitration in Africa. Sponsored by Africa-focused legal and advisory firm CLG, the panel will bring together operators, investors, legal practitioners and government representatives to examine how commercial agreements can be structured to manage disputes before they escalate.

Nigeria provides a clear example of how the legal architecture around upstream investment is evolving. The Petroleum Industry Act, enacted in 2021, overhauled the country’s petroleum fiscal and regulatory framework, changing the terms governing production-sharing contracts, joint ventures and other upstream arrangements. Nigeria has also strengthened its dispute-resolution framework through the Arbitration and Mediation Act of 2023, while the Nigerian Upstream Petroleum Regulatory Commission has promoted an Alternative Dispute Resolution Center designed to provide a sector-specific mechanism for resolving upstream disputes.

You cannot do a deal in Africa today without thinking seriously about how you would resolve a dispute if the terms change

Senegal illustrates another dimension of the challenge. Following first oil at the Sangomar field in 2024 and a rapid production ramp-up, the government established a commission to review existing oil and gas contracts with operators including Woodside and bp. While governments retain the sovereign right to review their resource agreements, such processes can alter the commercial assumptions underpinning investments and raise questions around stabilization provisions, production-sharing terms and other contractual protections.

Across parts of West Africa, political transitions, security disruptions and changes to mining and petroleum legislation are adding further uncertainty for investors. At the same time, geopolitical shocks and shifting global energy policies are testing agreements that were negotiated under very different market conditions. For companies committing billions of dollars to long-life upstream projects, the ability to anticipate and manage those changes has become an increasingly important component of investment decisions.

Arbitration remains a central tool. A review by Nigerian law firm OAL found that by 2025, most cross-border oil, gas and power agreements in Africa expressly identified arbitration as the preferred dispute-resolution mechanism. At AEW 2026, the Upstream E&P Forum panel will examine why arbitration continues to dominate cross-border energy contracts and how bilateral investment treaties, domestic legislation, ESG obligations and changing regulatory requirements interact when disputes arise.

“You cannot do a deal in Africa today without thinking seriously about how you would resolve a dispute if the terms change. We’re increasingly seeing arbitration planning as part of the commercial conversation from the start, and rightly so,” said NJ Ayuk, Executive Chairman of the African Energy Chamber. “That commercial focus is central to AEW 2026, which brings governments, investors, operators and legal experts together to address the practical conditions required to unlock the continent’s next wave of energy investment.

The Resource Nationalism, ESG and Investor Protection session will examine the intersection of contractual protections, regulatory change, political risk and the technical complexities of energy projects, giving investors and governments a practical forum to consider how stronger dispute-resolution frameworks can support Africa’s next generation of oil and gas investment.

Distributed by APO Group on behalf of African Energy Chamber.

 




 

Continue Reading

Business

Project & Investment Network and African Infrastructure Elites: A stronger platform for African project visibility

Published

on

Project

The Project & Investment Network is a dedicated meeting ground for project developers, financiers, investors, utilities, municipalities, commercial and industrial energy users and strategic partners active in Africa’s power, energy and water sectors

 




 

CAPE TOWN, South Africa, September 2, 2026/APO Group/ –Africa’s power, energy and water sectors need more than good ideas. They need visibility, credibility, structured engagement and the right capital connections.

The Project & Investment Network (https://apo-opa.co/4qPyeal) (P&IN), created by VUKA Group, supports this by creating a curated environment where project owners can present opportunities and investors can identify high-potential developments aligned with their mandates. With African Infrastructure Elites (https://apo-opa.co/4h4j2mu) as Host Media Partner, these opportunities gain additional reach through one of Africa’s trusted power, energy, water and utility media platforms.

This partnership helps bridge a persistent gap in the market: strong projects need access to capital and investors need credible, well-positioned opportunities.

The Project & Investment Network is a dedicated meeting ground for project developers, financiers, investors, utilities, municipalities, commercial and industrial energy users and strategic partners active in Africa’s power, energy and water sectors.

Through this collaboration, African Infrastructure Elites will support The Project & Investment Network by amplifying the projects, people and investment conversations shaping Africa’s infrastructure future.

Upcoming opportunities to participate

P&IN will create opportunities for project owners and investors to engage across VUKA Group’s upcoming power, energy and water events:

Project & Investment Network Open: 23 October 2026, Serengeti Golf Club, Johannesburg, South Africa: Register your interest (https://apo-opa.co/4ygw8D6) in participating in the Open.

C&I Energy + Storage Summit Johannesburg: 28 – 29 October 2026, The Maslow Hotel, Sandton, Johannesburg, South Africa: A targeted platform for South Africa’s commercial and industrial sector, co-located with a C&I-focused Water Security Africa programme and the EIUG Conference. Find out more (https://apo-opa.co/4qTkLyv).

Enlit Africa: 11 – 13 May 2027, CTICC, Cape Town, South Africa: Africa’s leading power, energy and water conference and exhibition, hosted annually at the CTICC in Cape Town and attended by thousands of sector stakeholders from across the continent and beyond. Find out more (https://apo-opa.co/4yal5v6).

Water Security Africa: 11 – 13 May 2027, CTICC, Cape Town, South Africa: Co-located with Enlit Africa, this platform explores the water-energy-food nexus and the solutions needed to strengthen water resilience across Africa. Find out more (https://apo-opa.co/4zOtF4e).

Submit your project

Do you have a power, energy, water or infrastructure project seeking visibility, finance or strategic partners? Submit your project (https://apo-opa.co/4qPyeal) to the Project & Investment Network.

Apply as an investor

 

Are you looking for credible project opportunities across Africa’s power, energy and water sectors? Apply to participate as an investor (https://apo-opa.co/4qPyeal) in the Project & Investment Network.

For sponsorship enquiries, please contact Marcel du Toit: marel.dutoit@wearevuka.com

Why Africa Infrastructure Elites matters

The African Infrastructure Elites (https://apo-opa.co/4h4j2mu) is an annual initiative by ESI Africa that recognises the projects, leaders and innovations shaping Africa’s power, energy, water and transport markets. The platform profiles the people and projects driving measurable impact across the continent, from generation, transmission and distribution to water, storage, clean energy, infrastructure, mobility and sector-coupling solutions.

For project owners, being associated with Elites creates long-term visibility among decision-makers, policy influencers, technical specialists and investment stakeholders. For investors, it provides a trusted lens into the projects, companies and leaders advancing Africa’s energy, water and transport priorities.

Nominations for the 11th African Infrastructure Elites: Projects and People Magazine are open (https://apo-opa.co/3UQS6xY) until the 2nd of October 2026.

The theme for the 2026/27 edition, Access and Affordability Empowers Security for All, speaks directly to one of Africa’s most pressing development imperatives. Reliable and affordable access to electricity, clean water, sanitation and sustainable transport remains fundamental to economic growth, social wellbeing and long-term resilience.

Distributed by APO Group on behalf of VUKA Group.

 




 

Continue Reading

Trending