2.1.2 Vulnerabilities
Trends and forecasts globally1 indicate the rapid proliferation to come of the 'Internet of things'
and that Senegal's commitment to digitalising its economy and society suggests there will be
new vulnerabilities which can be exploited, even attacked on a grand scale. Indeed,
considering the growing devices and processes which are interconnected or connected to the
Internet, the vulnerabilities Senegal faces will include those of not having security devices at
equipment level, but also threats to interconnected systems on which our society depends.
As networks, systems and software become increasingly vulnerable, it is becoming urgent for
our country to develop good practices and cybersecurity processes in all sectors. This need
manifested itself since the recent large-scale attacks observed worldwide, like Wannacry in
2017, which hit many governments and businesses worldwide. As most cyberattacks are
made exploiting known vulnerabilities and can easily be resolved, it is essential that each
country take steps to encourage individuals, enterprises and institutions to take the measures
required and invest adequately in reducing these vulnerabilities.
This is consistent with the current situation in Senegal where, despite the work which has
been done, we still lack the skills and knowhow to handle the cybersecurity requirements of
the private and public sectors. Apart from IT engineers, most staff and officers of most private
and public sector organisations in Senegal are unaware just how serious cyberthreats are and
are not aware enough of this. Some major private sector organisations like banks and
telecoms operators know something about cybersecurity and tend to promote the
development of a cybersecurity-oriented culture amongst their staff, particularly in terms of
high-risk practices; but there are many organisations, particularly those offering financial
services, which do not always take steps which are adequate to their vulnerabilities.
Considering there is no coordinated awareness programme at national level aimed at all
sectors of Senegalese society, the general public is not aware of cybersecurity issues enough.
One major vulnerability which we currently see in Senegal involves the shortcomings in the
field of specialist skills and abilities required to keep abreast with what is happening in
cybernetics and adequate technologies to manage the risks and threats involved. It is vital that
Senegal deals with these shortcomings.
Many public and private sector organisations in Senegal and individuals also tend to use
systems which keep using obsolete or unprotected software versions. In many cases, we find
they are using software which suppliers no longer support or for which protection systems no
longer exist. Software which is unprotected or obsolete usually suffers from vulnerabilities
which those who create cyberthreats search for and exploit.
2.2 Scope of the strategy
SNC2022 explains Senegal's strategic vision and aims in terms of cybersecurity and a
commitment to supporting national priorities constantly in promoting converting Senegal to
digital. SNC2022 aims to guide the State's actions in terms of cybersecurity by offering the
people of Senegal a vision, including public and private sector organisations, civil society and
other stakeholders.
1
Roundup Of Internet Of Things Forecasts And Market Estimates, 2016 https://www.forbes.com/sites/louiscolumbus/2016/11/27/roundup-of-internet-of-things-forecasts-and-market-estimates2016/#368ddbb9292d
9
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents