Logo of Phnom Penh Post newspaper Phnom Penh Post - Information security lacking with domestic firms

Information security lacking with domestic firms

Information security lacking with domestic firms

Information security is not a priority for many domestic firms and organisations, so it is a tough task convincing them to take it seriously, says Bernard Alphonso. As the director of what he claims is the Kingdom’s only firm specialising in the field, he would know.

Alphonso – a self-professed “security evangelist” – says that many of the calls he receives come after a problem has already arisen and the damage is done. He advocates a proactive approach to information security, claiming it should be the domain of the decision makers rather than IT managers.

“It’s high time Cambodia became serious about information security,” he says. “Based on my own experience, but this is me, typically very few things are being done.”

Alphonso started Alphonso Security Consulting in France in 2003, before moving it to Cambodia in 2005.

“As far as I know I don’t have any direct competitors in Cambodia,” he says. “What characterises my firm is that it is 100 percent specialised in information security management.”

The recent WikiLeaks situation showed that often the main threat to security was not purely online hackers, but was often as simple as individuals stealing information. In the case of WikiLeaks, security had allegedly been breached from Bradley Manning, a 22-year-old US Army soldier.

Alphonso says stealing digitised information is generally easier than taking physical items.

“People often don’t have a perception [that] they are committing a crime,” he says. “CEOs, for example, are gold mines of information.

“Let’s not wait for the big data breach to happen.”

Although Cambodia’s economy is benefiting from the advent of its communications networks, this also opens up companies and organisations to more possible breaches.

Alphonso says it would be far easier for clients to act proactively, but generally he’s called into action after the system is already down or the data is already gone.

Too much money is often spent on security, when many problems could be prevented by applying simple common sense, he says.

For example, he has seen money wasted on sprinklers in server rooms and hiring guards that spend their time on duty asleep, along with other dubious expenditures.

While technology plays a large role in information security, software alone is no good if not updated, he says.

“Security training is far and between although human beings have always been the proven weakest link in a security chain.”

When working with clients, he first advocates an assessment to look at possible vulnerabilities.

He is the only employee at the firm, but says he works in tandem with other consultants, including for clients based in Malaysia and Singapore.

Still, Alphonso says he has had a tough time selling his mission in Cambodia.

“All too often I have encountered skepticism and resistance,” he says. “Security is like insurance and you know that when insurance policies are not legally mandatory people tend to be negligent and risk prone.”

MOST VIEWED

  • Phnom Penh placed in two-week lockdown

    The government has decided to place Phnom Penh in lockdown for two weeks, effective April 14 midnight through April 28, as Cambodia continues to grapple with the ongoing community outbreak of Covid-19, which has seen no sign of subsiding. According to a directive signed by Prime Minister

  • Cambodia on the verge of national tragedy, WHO warns

    The World Health Organisation (WHO) in Cambodia warned that the country had reached another critical point amid a sudden, huge surge in community transmission cases and deaths. “We stand on the brink of a national tragedy because of Covid-19. Despite our best efforts, we are

  • Hun Sen: Stay where you are, or else

    Prime Minister Hun Sen warned that the two-week lockdown of Phnom Penh and adjacent Kandal provincial town Takmao could be extended if people are not cooperative by staying home. “Now let me make this clear: stay in your home, village, and district and remain where

  • Vaccination open to foreigners in Cambodia

    The Ministry of Health on April 8 issued an announcement on Covid-19 vaccination for foreigners residing and working in Cambodia, directing the Ministry of Labour and Vocational Training and local authorities to register them. Health minister Mam Bun Heng, who is also head of the inter-ministerial

  • Ministry names types of business permitted amid lockdown

    The Ministry of Labour and Vocational Training singled out 11 types of business that are permitted to operate during the lockdown of Phnom Penh and Takmao town, which run through April 28. Those include (1) food-processing enterprises and slaughterhouses; (2) providers of public services such as firefighting, utility and

  • Culture ministry: Take Tuol Sleng photos down, or else

    The Ministry of Culture and Fine Arts has told Irish photographer Matt Loughrey to take down the photos of Khmer Rouge victims at Tuol Sleng Genocidal Museum which he allegedly colourised and altered to show them smiling. The ministry said Loughrey's work is unacceptable, affecting