Page 72 - Risk Report 2024

IRMSA
72 RISK REPORT 2024/25
Scenario:

What it can look like if it happens now

An undersea cable to SA is interrupted for months and workarounds are ineffective. All digitally enabled services
are more than 80% compromised. Many businesses are unable to operate, and critical services such as banking
and telecommunications are severely affected.

Immediate resilience/emergency

preparedness: Medium impact in the

short term

IT DRPs Employee Training External Trend Monitoring
Review/update IT DRPs on Train employees Collaborate with industry peers,
vulnerability and threat comprehensively on generative cybersecurity organisations, and
detection and response actions. AI risks (e.g. deepfakes, Government agencies on emerging
synthetic media, phishing, social threats and mitigation practices.
engineering), and identifying and
reporting suspicious activities.

Cyber Security Impact Analyses Ethical Use of AI
Vulnerability Implement ethical AI governance
Conduct regular impact analyses
Monitor cybersecurity and AI risk on the consequences of framework to include principles
posture of 3rd-party vendors, attacks on operations, financial of transparency, accountability,
suppliers, and partners, and performance, and reputation. fairness, data privacy, algorithmic
enforce adequate safeguards. bias, and social impact.