Logo of Phnom Penh Post newspaper Phnom Penh Post - Information security lacking with domestic firms

Information security lacking with domestic firms

Information security lacking with domestic firms

Information security is not a priority for many domestic firms and organisations, so it is a tough task convincing them to take it seriously, says Bernard Alphonso. As the director of what he claims is the Kingdom’s only firm specialising in the field, he would know.

Alphonso – a self-professed “security evangelist” – says that many of the calls he receives come after a problem has already arisen and the damage is done. He advocates a proactive approach to information security, claiming it should be the domain of the decision makers rather than IT managers.

“It’s high time Cambodia became serious about information security,” he says. “Based on my own experience, but this is me, typically very few things are being done.”

Alphonso started Alphonso Security Consulting in France in 2003, before moving it to Cambodia in 2005.

“As far as I know I don’t have any direct competitors in Cambodia,” he says. “What characterises my firm is that it is 100 percent specialised in information security management.”

The recent WikiLeaks situation showed that often the main threat to security was not purely online hackers, but was often as simple as individuals stealing information. In the case of WikiLeaks, security had allegedly been breached from Bradley Manning, a 22-year-old US Army soldier.

Alphonso says stealing digitised information is generally easier than taking physical items.

“People often don’t have a perception [that] they are committing a crime,” he says. “CEOs, for example, are gold mines of information.

“Let’s not wait for the big data breach to happen.”

Although Cambodia’s economy is benefiting from the advent of its communications networks, this also opens up companies and organisations to more possible breaches.

Alphonso says it would be far easier for clients to act proactively, but generally he’s called into action after the system is already down or the data is already gone.

Too much money is often spent on security, when many problems could be prevented by applying simple common sense, he says.

For example, he has seen money wasted on sprinklers in server rooms and hiring guards that spend their time on duty asleep, along with other dubious expenditures.

While technology plays a large role in information security, software alone is no good if not updated, he says.

“Security training is far and between although human beings have always been the proven weakest link in a security chain.”

When working with clients, he first advocates an assessment to look at possible vulnerabilities.

He is the only employee at the firm, but says he works in tandem with other consultants, including for clients based in Malaysia and Singapore.

Still, Alphonso says he has had a tough time selling his mission in Cambodia.

“All too often I have encountered skepticism and resistance,” he says. “Security is like insurance and you know that when insurance policies are not legally mandatory people tend to be negligent and risk prone.”

MOST VIEWED

  • Malaysia MP accused of ‘influencing law’

    Malaysian Member of Parliament (MP) Larry Sng arrived in Siem Reap early on Wednesday, in what was slammed by one NGO as efforts by Kuala Lumpur to “influence Cambodian law”. The Malaysian Embassy in Phnom Penh requested on January 30 “cooperation from the Ministry of Foreign

  • Ministries begin measures to offset EU’s EBA decision

    In the wake of the EU’s controversial announcement this week that it has begun the withdrawal process for Cambodia’s Everything But Arms (EBA) preferential agreement, government ministries and political analysts continued to share their reactions and economic mitigation plans in preparation for the

  • Emirates launches route connecting Phnom Penh, Bangkok

    Emirates will launch a daily service on June 1 linking Phnom Penh (PNH) and Bangkok (BKK). The service from Phnom Penh to Dubai, via Bangkok, will provide more flight options to passengers travelling between the capitals of Cambodia and Thailand. Travellers from the Southeast Asian nations

  • US Embassy urged to stop ‘disrespecting sovereignty’

    The Ministry of Foreign Affairs and International Cooperation called on the US Embassy in Phnom Penh on Saturday to respect the Vienna Convention on Diplomatic Relations after it called former opposition leader Kem Sokha “an innocent man” – a move deemed to be “disrespecting Cambodia’s