Enrich you Curriculum with Tech & Innovation Club

Let's go!
    • Search for:
    27Dec, 2022
    Why is business and IS alignment important?

    The current structure and future strategy of a business must be aligned with both IS and business to ensure that information is properly utilised to its maximum potential within a business.

    Business and IS alignment are important because:

    1. It assures that all IT activities contribute to the goals, objectives and strategies of the business.
    2. It encourages executives to become continuously involved in plans and decisions in the use of IT
    3. It positions the IT organisation to best address the needs of the business.
    4. It creates a customer-focused culture in the IT organisation.
    5. It enhances awareness of the value of IT to the business.
    6. It is critical to the successful deployment of IT in a business.
    7. It improves productivity and the all-around efficiency of the organisation.

    L:\Scan\Graphics-Department Server\Job Folder\Powerpoint-Work\Pe_Uk\PE182-Boddy\Final files\Gif\ch04\C04NF011.gif

    Boddy et al. (2009) give us a model that shows the alignment between IS and an organisation, in plans and in operations.

    To learn more about how you can align your business and IS or for a digital maturity assessment, do not hesitate to contact us with this link.


    11Aug, 2022
    Digital inclusion: 9 recommendations for impact in Lagos State

    Digital is changing our lives! It is changing our jobs, how we run our businesses, how we manage our health, how we manage our work, how we learn and it is changing how we manage money.

    Having the digital skills, motives, spaces, provisions, technology infrastructures, leadership and the confidence to navigate the digital world is becoming essential for life, education and work.

    According to the World Economic Forum’s publication titled Our Shared Digital Future, the fourth industrial revolution is well underway and it has the power to reduce inequalities in Lagos, Nigeria, Africa, and the world at large.

    However, doing so depends on having certain technological levers and mechanisms in place. Doing so depends on empowering everyone – regardless of geography, location, income, age or gender – and it requires concerted action and greater collaboration across all players.

    1. Encourage employers to support basic and intermediate digital skills: especially for low-skilled staff, using resources available off and online and in communities. We need to find better ways to engage and support people in low-paid jobs, with low literacy, low digital skills, and who want to progress.
    2. Use digital inclusion to catalyse collaboration locally: Stronger strategic leadership by local authorities with comprehensive strategies for digital inclusion are needed. Co-ordinated pathways to support and make it easier for people to get the support that they need to progress.
    3. Accessible and affordable Broadband infrastructure (i.e Fiber Optic): Broadband also plays an important role in improving social outcomes. Broadband democratizes access to education, offering a wide supply of free and open education platforms, courses, and resources. It can also help people foster social support and stay in contact with a broader social network.
    4. Invest in citizen institutions such as Local Government Libraries and community learning centres: The library is a controlled space for connecting with children while allowing them space and time to make their own connections. Children can now enjoy many free activities with their parent/s or guardian at the local library.
    5. Embed digital inclusion in all major initiatives: For jobs and skills, financial inclusion, and small business support. We have now reached technology adoption maturity ushering in the decline that will lead to new AI and AR. Digital should be an integral component, not a bolt.
    6. Promote the benefits of digital and the internet: especially for people on local incomes and those seeking work. Some significant economic opportunities lie in monitoring micro businesses, educational institutions and sole traders to embrace technology and digital.
    7. Provide free and affordable essential digital skills support for citizens: For everyone who needs it, prioritising those who are constrained by poverty. The Lagos government needs to use their developed powers to ensure adult skill policies deliver a genuinely inclusive and effective offer. This means: recognising that effective support is much wider than digital skills; it is about digital motivation and confidence and developing people’s ability to apply digital skills for life and work. Supporting trusted and recognised faces and trusted faces in local places is the best way to reach individuals, organisations, lawmakers and institutions who need support the most. Finally, ensuring that support keeps pace with digital trends, online safety, skills for the future of work and digital financial skills.
    8. Support holistic approaches to the digital capability that understand the wider needs of the individuals: foregrounding digital skills about social inclusion and education. Our local services should be person-centred, agile and motivational, taking into account the interactions between individual factors, personal circumstances and external factors.
    9. Harness the power of peers: to build skills and motivation, whether through peer support in communities, schools, or local and national business networks. Furthermore, when people share stories of how digital has benefited them, this can motivate others.

    There are deep-reaching opportunities to use digital inclusion to create a fairer society and equitable and inclusive economy in Lagos State and Nigeria but we can only make it happen if we work together.

    11Aug, 2022
    Cybersecurity risk predictions for 2022 and beyond

    As the end of 2020 draws closer, it is imperative for both organizations and individuals alike to reflect and gear up for cybersecurity and cybercrime in the new decade. Organizations and individuals should consider new and innovative approaches, but most importantly, a proactive and deliberate approach that’s deliberately directed to identify, capture and neutralize threats is essential. Considering the frequency and sophistication of hacking and ransomware attacks in 2019, not to mention, the pandemic and urgent adoption of remote learning by organisations around the world – skilled resources and smarter measures should be of consideration in the new decade.

    For this reason, I distilled 30 independent reports dedicated to cybersecurity and I have compiled the 7 most interesting projections in this article.

    Internal/External Sabotage – The global proliferation of IoT (Internet of Things) and connected devices, usage of public cloud, PaaS (Platform As A Service), and IaaS (Infrastructure As A Service) greatly facilitates business and enables rapid growth. Concomitant, and often unnoticed, is the increase in an organization’s external attack surface. As you cannot protect what you don’t know, the vast proportion of these digital assets is not properly maintained, monitored, or protected in any manner. The situation is exacerbated by rogue mobile apps, fraudulent, phishing, and squatting websites, detectable by properly implemented domain security monitoring that has now started paving its road to popularity among cybersecurity professionals. As organizations upgrade their IT and leave behind a trail of obscure digital unknowns, whether in-house or external, the easier and faster it is to break in. According to CSO Online by IDG, 61% of organizations experienced an IoT security incident in 2019.

    Compliance Fatigue – The mushroomed regional, national, and transnational regulatory and political climate may exacerbate compliance fatigue among cybersecurity professionals. 2020 may just be the year when current cybersecurity compliance begins to erode and start its rapid downfall. In light of the slow judicial system on one side, and insufficient cybersecurity skills and scanty budgets on another, cybersecurity professionals may start flatly disregarding the wide spectrum of superfluous regulations. Thankfully, in the UK, GDPR data subjects are empowered with a bundle of rights to control their personal data and its life cycle.

    Third-Party Breaches – In 2019, many businesses displayed a high level of proficiency and specialization by concentrating all available resources to attain excellence in a particular market, playing to their strengths. To achieve this, they outsourced most of their secondary business processes to skilled suppliers and experienced third parties, thereby reducing costs, increasing quality, and accelerating delivery. Cybercriminals are well aware of this low-hanging fruit and will continue to purposely target this weakest link to get your data, trade secrets, and intellectual property.

    Enterprise collaboration – According to ImmuniWeb, over 21 million valid credentials were exposed on the Dark Web in 2019. The dark web is increasingly becoming popular and fashionably lucrative for rogue individuals and criminal enterprises. In 2021, we may witness new enterprise models and ways of working via the dark web. To this end, organizations may need to invest in understanding the dark web, and counter and mobile-based applications that deter or directly attack cyber-threats.

    The Cloud – In July 2019, the world media reported a breach of Capital One, being presumably the largest data breach within the US financial sector and affecting approximately 100 million individuals in the United States and 6 million in Canada. Reportedly, the attacker exploited a misconfigured AWS S3 bucket to download extremely sensitive data that was left unattended. There are already signs that suggest that cloud misconfigurations will expose millions of records in 2020 and beyond. In 2020 and the foreseeable future, cloud security incidents will stay atop data breach root causes. Furthermore, we are yet to experience an attack on the cloud providers and applications such as One Drive and Google Drive and many trusted brands for that matter. Will cybercriminals exploit this trust in 2021?

    Password reuse and Phishing – Even if the passwords found or purchased by the attackers on the Dark Web are invalid, they provide a great wealth of ideas for ingenious social engineering campaigns, and facilitate phishing and smart brute-forcing attacks. There are already creative and innovative methods being exploited within certain industries, e.g. fingerprint scans, and facial and voice recognition. But, even if many organizations finally managed to implement consumable Identity and Access Management (IAM) systems, with strong password policies, MFA, and continuous monitoring for anomalies, few external systems are included in the safeguarded scope. Such grey-zone systems range from SaaS CRM and ER Such grey-zone systems range from SaaS CRM and ERP to elastic public cloud platforms. According to DBIR, phishing was responsible for 32% of data breaches and 78% of cyber espionage in 2019.

    Ecommerce and targeted ransomware – According to IBM, the average time to identify a breach in 2019 was as high as 206 days. Still, even worse, such attacks are infrequently detected both due to their sophistication and lack of skills among the victims, eventually being suddenly reported by security researchers or journalists and flabbergasting the data owners. 2021 will see a significant increase in organized ransomware activities under the umbrella of some sort of support or professional service. They are often deployed through Trojans (through an email attachment) and they are extremely difficult to detect or prepare for.

    History has shown that the period from the moment when an attack is launched to until when it is detected has the most devastating impact. Organizations and individuals should consider new and innovative approaches, but most importantly, a proactive disposition deliberately directed to identify, capture and neutralize cyber-threats before manifestation.

    Shop Now