Frequently asked questions (FAQs) related to cybercrime.
Is there insurance specifically for cybercrimes?
Yes. There is cyber risk insurance, for your own loss, and cyber liability cover.
How should I incorporate SOPs in our cybersecurity policies?
The SOPs don’t need their own distinct policy. Learn the details about the SOPs and the Cybercrimes Act to integrate them into existing policies related to data management, investigations and security protocols.
How can I teach this information to my team?
You can incorporate cybersecurity and awareness into ongoing training workshops.
What are the information regulator’s plans to work with other regulators in ensuring alignment in inputs on the standard frameworks and policies that will cover cybercrimes?
The initial difficulty that South Africa is facing is that it does not have a cybercrimes commission. At present, the Information Regulator works closely with the police and the Hawks but uses its own processes separate to those used by [...]
What role will the information regulator play in terms of the Cybersecurity Act?
The Information Regulator will have a similar role with the Cybersecurity Act as it does now when receiving data breach notifications. A data breach is usually occurring at the same time as when a cybercrime is happening. The difficulty with [...]
What are some of the information regulator’s strategies for dealing with a criminal situation when contacting the police is not an option?
The information regulator would like to clarify that it is not a cybercrime agency and does not investigate cybercrimes. They do concede that there is a need for a cybercrime agency to assist in the regulation of cybercrimes in the [...]
What are the information regulator’s plans regarding AI?
While the Information Regulator (IR)'s plan is to keep an eye on international developments regarding AI regulation, AI is not an immediate priority for the Information Regulator right now. Their current focus lies on amending existing legislation like POPI and [...]
What is a business email compromise?
Business email compromise is a phishing method where scammers and other threat actors use email as a tool to reach (usually key) members of an organisation and trick them into revealing sensitive information or sending money.
Are there any current cybercrime cases?
We have a list of cybercrime cases on our website, where we provide our practical insights on these cases. Visit our cybercrime judgments page for the latest case law.
Any updates on the Standard Operating Procedures (SOPs)?
The final SOPs have been published. We've written a post explaining what the final SOPs are all about and how they practically affect organisations. Read more about the final SOPs: www.michalsons.com/saps-standard-operating-procedures-final
How easy is it to report a cybercrime to the police?
Reporting a cybercrime really depends on the capacity of the police station you report a cybercrime at and their understanding of the law. In theory, you should be able to report a cybercrime to any police station, but practically, not [...]
Are all data breaches, cybercrimes?
The answer to this is a bit complex. POPIA, for example, states that "where there are reasonable grounds to believe that the personal information of a data subject has been accessed or acquired by any unauthorised person, the responsible party [...]