by Jenny Reid

As cybercrime continues to surge in South Africa, the importance of effective employee screening to address this risk is paramount.

In 2024 alone, Interpol reported over 3,300 global cybercrime incidents affecting governments, banks, and the general public each week, reflecting a growing threat landscape. With cyber threats increasingly targeting organisations across South Africa, businesses must prioritise comprehensive screening processes to safeguard against potential breaches stemming from internal and external sources.

The financial losses alone caused by cybercrime are alarming. Interpol estimates that these losses reach approximately R2.2 billion annually. Furthermore, the rise of ransomware incidents has been staggering, with a 90% increase, resulting in cybercrime costs approximating 1% of South Africa's GDP. This impact goes beyond immediate financial losses however, as it also includes reputational damage, legal liabilities, the loss of intellectual property, sensitive information leaks and operational disruptions.

In light of this unprecedented threat, employee screening is vital in mitigating the human risks associated with cybercrime.

Here's why:

Identifying Potential Threats: Background checks can help uncover any previous misconduct incidents or red flags, suggesting a higher potential for future related offences. This is particularly important as insider threats are often more dangerous than external threats as employees can significantly compromise an organisation's security.
Assessing Skills and Fit: With cyber security measures rapidly evolving, it is crucial to evaluate candidates for their technical skills, integrity and cultural fit. Screening can identify individuals with the necessary competencies to handle sensitive data and understand the importance of compliance and ethical standards.
Establishing Trust: Robust employee screening measures reassure employers that they are hiring individuals dedicated to protecting company assets. Establishing a workforce built on trust is critical in combating the vulnerabilities that cyber criminals exploit.
Preventing Ransomware and Other Threats: With the increased prevalence of cyber threats such as ransomware and business email compromise, hiring employees who are knowledgeable and vigilant about security protocols can help create an internal culture of precaution and awareness.

Employers should integrate the following best practices into their employee screening policies to strengthen their defences against cybercrime:

Comprehensive Background Checks: Include criminal record checks, employment history verification & reference checks, education confirmation, social media risk assessments and integrity assessments. This process should be detailed to ensure thorough vetting of potential employees.
Skill Assessments: Evaluate candidates' technical skills and cyber literacy, particularly for roles that involve handling sensitive information or technology. This could include practical tests or situational assessments related to data security.

Psychometric Testing: Implement assessments to gauge candidates' problem-solving skills, ethical reasoning, and ability to operate under pressure—crucial qualities in high-stakes environments like cybersecurity.

Continuous Monitoring: Screening should not be a one-time process. Implement ongoing monitoring for current employees to identify any changes in behaviour or new risks that may emerge post-hire.

Recognising the growing threat of cybercrime has led to collaborations between law enforcement and organisations to enhance cybersecurity measures. Interpol's engagement with South African authorities is a significant step toward reinforcing local capabilities and strategies to combat cyber threats.

As technology advances, organisations must invest in human resources as their first line of defence. A solid employee screening framework paired with continuous education on cybersecurity can effectively reduce vulnerabilities.

Implementing thorough employee screening processes is essential in an era when cybercrime poses a substantial threat to organisations. Companies can better safeguard their operations and protect against significant financial and reputational losses by proactively identifying potential risks associated with new hires and existing staff.

Adopting these best practices enhances workforce integrity and positions organisations to thrive in an increasingly online and interconnected world.

Prioritising employee screening is fundamental to creating a resilient defence against cybercrime in South Africa.

Jenny Reid is a Human Risk Expert and Professional Speaker, and the owner of iFacts based in South Africa, a specialist employee screening and vetting service. She is constantly assessing new and innovative ways to remove the people risk in any organisation. Since 2009 when she took over iFacts completely, she has seen the company double in size and hopes to continue this growth. iFacts specializes in employee Screening, risk assessments, employee wellness, investigations, and truth verification. Jenny is a past President of the Security Association of South Africa. Contact Jenni via email jenny@ifacts.co.za