Moving South Africa's Public Sector into the Cloud

South Africa's public sector is embracing digital transformation at an increasing pace. Over the last 20 years, the government has sought to leverage technology to enhance government processes, making them more efficient and accessible to South Africans. This has evolved from e-government initiatives to plans that include the digitisation of government services to an extent that provides for internal systems that govern workflow processes. From digitised health and identity records, online booking of vehicle registration, social grant systems, and other business and social services. However, the more we connect these critical services to the internet, the more vulnerable they become to cyber-attacks.

According to ESET's bi-annual Threat Report, South Africa ranked number one in Africa for ransomware and infostealer attacks in the second half of 2024. Globally, we are among the most frequently targeted nations. The consequences are not just technical headaches, but these threats can even hamper the optimal functioning of specific organs of state, especially at a local government level, where the government may not always have the depth of resources that would be equipped to effectively deal with such an incident, depending on the severity of the attack.

Cyberattacks can hinder the provision of essential services, from the processing of critical hospital records, social grants, and countless other vital information, when systems go offline due to a cyberattack. This has been the lived experience of several South Africans when interfacing with institutions that have been hit by an attack over the last five years.

The reality is that cyber-attacks such as ransomware, infostealers, and phishing attacks are becoming more sophisticated every day. Our defences must evolve accordingly. That means adopting a multi-layered cybersecurity approach, one that extends beyond installing firewalls and anti-viruses.

Moving government systems into the cloud can be one measure to help safeguard critical government services as we undertake this digital transition. While the cloud is not a cure-all, a secure cloud environment can integrate more robust security tools, which are constantly applied and monitored, providing an advantage in ensuring long-term security and the stability of systems.

Disaster Recovery and Backup: Cloud-based systems allow for quick restoration of services following a cyber-attack incident, reducing downtime and minimising disruption.

Scalability and Flexibility: As threats continue to evolve, cloud platforms can easily incorporate new security tools and protocols without the expensive delays associated with updating physical infrastructure.

Critics may argue that moving government data into the cloud introduces new risks, especially when foreign-based providers are involved.

This is a valid concern, one that must be addressed through stringent procurement protocols, building local data centre capacity to ensure resiliency and working with service providers who comply with our national security priorities.

Migrating South Africa's government services into secure cloud environments will ensure that, when the next cyberattack affects our public institutions, South African's can rest assured that they will still be able to enjoy the services they rely on.

Ms Brynn Gerson, heads Dube iConnect a government-owned Telecommunications and Local Cloud Computing Service Provider, within Dube TradePort Special Economic Zone.

Moving South Africa's Public Sector into the Cloud