Businesses in Rwanda should strengthen their cybersecurity systems and prepare to recover quickly from attacks, experts have warned, saying early detection and effective response can limit financial and reputational damage.
The warning was issued on Tuesday, October 20, at a cybersecurity workshop organised by the National Cyber Security Authority (NCSA) in partnership with the Rwanda Development Board (RDB) in Kigali.
Held under the theme "Building Cyber Resilience in the Business Sector”, the workshop formed part of October cybersecurity awareness month campaign, Tekana Online.
ALSO READ: Cybersecurity: Rwandans urged to protect private data
Experts urged companies to adopt layered security measures, monitor their systems and establish recovery plans rather than assume preventive measures can stop every attack.
"You cannot secure or hope to be secure 100% ever,” said Alan Kajangwe, chief executive officer of cybersecurity company Wired Den, stressing the need for businesses to prepare for situations in which their first line of defence fails.
Early detection limits damage
Kajangwe said businesses should monitor their operations to identify breaches early and minimise their consequences.
Using digital payment systems as an example, he explained that daily reconciliation of transactions could help businesses identify irregularities sooner rather than discover them weeks later.
Early detection can help organisations contain breaches, reduce disruption and identify weaknesses in connected systems.
ALSO READ: Banks raise alarm over surge in phishing attempts
Security should support business
Vincent Ruzibuka, chief executive officer of QT Software, said some businesses still view cybersecurity as an expense rather than an essential part of their operations.
"People see security as just a burden. It's a budget constraint,” he said.
Ruzibuka said companies should assess the security of technology partners before integrating their systems, including testing connected platforms and checking how data is transferred. Weaknesses in third-party systems can expose organisations to risks beyond their direct control.
Joel Gashayija, who runs cybersecurity company Shield Tech Hub, said businesses should view cybersecurity as a tool for achieving their commercial objectives.
"Cybersecurity in itself is something that should enable your business,” he said.
Gashayija urged companies to assess the value of their digital assets, the sensitivity of the information they hold and potential financial and reputational losses they could face when deciding how much to invest in protection.
He added that businesses can begin with security measures that match their resources instead of postponing protection until they can afford more extensive systems.
Recovery is part of resilience
The discussions also highlighted the importance of responding effectively after an incident. NCSA officials said their approach to cybersecurity includes helping affected organisations recover and address the weaknesses that allowed a breach to occur.
During a discussion on incident reporting, Ghislaine Kayigi, NCSA's Chief Cybersecurity Standards Officer, stressed the need to equip Rwandans with the knowledge and skills to protect themselves in the digital spaces they use every day.
She said the workshop aimed to help businesses and other organisations translate cybersecurity policies into practical measures that strengthen their defences and improve their ability to respond to threats.
"The aim is to hold practical discussions that move cybersecurity from policy to practice,” she said.
She said the authority prioritises recovery and correcting the causes of a compromise. Businesses can report cybersecurity incidents and seek free assistance through the NCSA.