Ryan Mer, CEO at eftsure Africa Global losses from payment fraud have tripled from US$9.84 billion in 2011 to US$32.39 billion in 2020, according to Deutsche Bank’s 2021 report on the future of payments.
While cybercriminals can target many areas of an organisation, the dangers are ultimately measured in financial terms. This means CFOs no longer ignore cyber security simply because it is a complex issue outside their area of expertise. As custodians of the company’s monetary assets and financial data, CFOs are responsible for safeguarding the enterprise from threats to its financial health, especially those that can result from processes within the finance domain, such as accounts payable.
CFOs need to play a key role in their company’s cyber security. The CFO is responsible for some of the most sensitive and valuable data the organisation possesses. It is potentially disastrous for the finance team to be ignorant of cyber risk.
Below are six ways CFOs can combat the risk of payment fraud:
- Know your vulnerabilities and understand risks
The first line of defense is to identify which information requires the most protection and research the many ways your organisation could be attacked. Hackers often target the finance department and team members directly in attempts to defraud. CFOs need to ensure that these vulnerabilities are both understood and addressed. This means testing current processes and systems to find weak spots, perhaps with the help of external experts.
Many organisations’ weak areas lie in their manual processes, which use human inputting methods and decision-making, often resulting in errors and gaps in security. Independent third-party platforms can help manage supplier data and automate payment checking and supplier verification, saving time on manual processes and reducing human error and manipulations.
- Improve your basic security
Review your company practices in relation to password and security controls. Look at whether you can strengthen your company’s passwords and ensure that they are changed on a regular basis, if possible, adding an extra layer of security with two-factor authentication.
- Move data to the cloud
Stay ahead of ever-changing security demands by moving sensitive data to the cloud, where it is kept in centralised storage that can only be accessed through sophisticated authentication methods. Cloud providers update their systems frequently based on the latest security best practices, providing new encryption techniques, improved login protocols and real-time identification of unauthorised users and suspicious activity.
A little good makes big change
Hollard ChangeMaker is a first of its kind
insurance initiative that makes it easy to
make real change, create better futures,
and save on your premiums.
Volunteer. Do good.
Earn back some of your premium!
Hollard Life Assurance Company Limited (Reg.No.1993/001405/06) is a licensed Life Insurer and an Authorised Financial Services Provider, FSP No. 17697.
Offer currently only available on qualifying Hollard life insurance policies. T&Cs apply*.
- Tighten your payments security
Look at your payment processes and identify potential weaknesses, possibly re-evaluating your financial procedures for approving payment releases. Ways to address weaknesses include ensuring there is a clear separation of duties between staff and adding more verification steps. Limit the risks by providing an integrated payments system that cross-references the payments an organisation is about to release with a database of verified bank account details.
- Educate your staff
Employee email accounts are gateways to sensitive information and attacks, especially those in finance and accounts payable, making them targets of cybercrime. Equip staff with the skills and tools to spot threats and respond appropriately by introducing cyber safety awareness programmes, workshops and simulations. Enforce policies that restrict what information can be kept in email inboxes prior to secure archiving.
- Keep your cyber security updated
As cyber risk grows and cybercriminals get better at what they do, it pays to be proactive about the controls, oversight and data management processes you have in place. Avoid waiting for a fraud incident or assuming your organisation is fully protected from fraud. Constantly remind staff at all levels about the risks of cybercrime to help build a strong security-conscious culture and continuously update controls to adapt to new fraud patterns. Collaborate with the chief information security officer (CISO), if your organisation has one, or enlist the help of an outsourced CISO-as-a-Service to address these risks and for assistance in deploying new defences.
In South Africa, there is case precedence for firms being held liable for payments that did not reach the intended recipient, a situation that demands every CFO’s attention. It’s a war out there – and cybercriminals are bringing the battle to you. Don’t wait for them to succeed – be proactive and get on the front foot now so you stop them before they succeed.