20 May 2023

Aon: Cybercrimes Act Report 2023 - How the Cybercrimes Act 19 of 2020 impacts corporate South Africa

Submitted by: Teresa Settas

In its latest report, Aon South Africa unpacks the legislative changes to the cyber landscape in South Africa in relation to the Cybercrimes Act of 2020. The report takes a deep dive into the exposures and risks corporates are faced with and how these cyber risks impact their operations and balance sheet.

Cyber security concerns highlighted in Aon’s Cyber Security Risk Report, include:

  • Only 40% of organisations report having adequate remote work strategies.
  • Just 21% of organisations report having baseline measures in place to oversee critical suppliers and vendors.
  • Only 31% of organisations report having adequate business resilience measures in place to deal with ransomware threats.
  • Less than two in five organisations (36%) report having adequate levels of data security preparedness.

According to Zamani Ngidi, Cyber Solutions Senior Client Manager at Aon South Africa, the Cybercrimes Act 19 of 2020 creates cybercrime offences and prescribes penalties related to cybercrime. “It provides overarching legal authority on how to deal with cybercrimes, by regulating how these offences must be investigated which includes searching and gaining access to, or seizing items in relation to cybercrimes,” Zamani explains.

The introduction of the Cybercrimes Act recognises that cybercrime is on the increase. The Act codifies offenses and consolidates cybercrime laws in one place.

“Essentially, it aims to stop cybercrime, keep people safe from criminals, terrorists and improve the security of the country. The Act provides that cybercrime is seen as a criminal offence under South African law, which is a massive step in the right direction for South African businesses in terms of holding cyber criminals liable for their actions,” says Zamani.

And while the Cybercrimes Act provides legal recourse for any company victimised by an act of cybercrime, the Act’s relationship with the Protection of Personal Information Act (POPIA) could potentially create a myriad of liability and conflicting obligations when an incident occurs.

“We unpack these ambiguities in our 2023 Cybercrimes Act Report and how corporate South Africa can protect itself from cybercrime by implementing Aon’s Cyber Loop methodology, which seeks to remediate concerns in a company’s environment and reduce balance sheet exposure,” says Zamani.

You can download the report, here.

-- ENDS --

About Aon

Aon plc (NYSE: AON) exists to shape decisions for the better — to protect and enrich the lives of people around the world. Our colleagues provide our clients in over 120 countries and sovereignties with advice and solutions that give them the clarity and confidence to make better decisions to protect and grow their business. 

Follow Aon on LinkedInTwitterFacebook and Instagram. Stay up-to-date by visiting the Aon Newsroom and sign up for News Alerts here.