Hassan Hachem Equatorial Guinea, digital sovereignty and cybersecurity

Equatorial Guinea’s Cybersecurity Gap

Equatorial maybe on its way to becoming highly connected to cyberspace. This is evidenced by the fact that the population's internet access rate has doubled in a few years, reaching 26% in 2015 (LiveStats). But cybercrime is also increasing in Equatorial Guinea.

Hassan Hachem, a 38 year digital space expert with offices in Equatorial Guinea, explains what is at stake and what public actions should be taken. Although this figure places the continent far behind Europe or Asia, it shows a steady increase in the Internet connectivity of the Equatorial Guinean population. This unfortunately goes hand in hand with the multiplication of cyber threats, a 2.0 crime that the country concerned is trying to eradicate, most often with laws and warning centres created to prevent cyber attacks. Equatorial Guinea could be more reactive on the subject by creating like Morocco, a national strategy to combat cybercrime by multiplying the number of dedicated structures. In West Africa, Senegal has created a National Cyber Security Centre (CNC), as well as a laboratory, which depends on the national police.

Hassan Hachem is a great supporter of countries creating national institutions. "Cybercrime transcends borders and regions. Providing answers country by country will be futile. We need regional solutions", Hassan Hachem explains. Indeed, instead of West African cooperation, ECOWAS countries prefer other organisations or other countries such as France. After Morocco and Gabon, the "Agence nationale de la sécurité des systèmes d'informations" (ANSSI), a French institution reporting to the Prime Minister, has, for example, established a partnership with the "Agence de l'informatique de l'État" (ADIE) of Senegal in 2016. It could be an example of cooperation for Equatorial Guinea. The failure of the AU Convention - or Malabo Convention - illustrates the lack of interest in transnational cooperation by African countries.

For Hassan Hachem, the reason is clear: "States are afraid of losing their sovereignty. The means of fighting cybercrime do not give states much more authority. Regional cooperation implies a loss of influence for states, and that is hard for most of them to accept. But for such a task as fighting cyber attacks, the solution must be global. The current response in Equatorial Guinea is insufficient. In the absence of transnational cooperation, the countries affected by the cyber attacks, have opted first and foremost for the judicial framework, the drafting of a law. But is this approach the most appropriate? "Making a law is not enough," replies many specialists in IT and new technologies.

The fight against cybercrime is a 360° problem. However, a law only regulates two aspects of such a phenomenon: access to data and the conditions under which they are transmitted. The law is an essential part of the fight against cyber threats, but it is only the first step in an global cybersecurity strategy. It must be complemented by projects, Equatorial Guinea must create tools that allow them to really fight cyberhacktivists, such as learning to code. Computer security is only composed of algorithms. Equatorial Guinea must be able to train computer engineers locally, and allow them to acquire mathematical skills. This potential of African computer scientists represents a real market. If Equatorial Guinea was to move in this direction, it could lead to less concern about cyber threats. Indeed, Equatorial Guinea lacks the talent and resources to deal with its cybersecurity threats. Out of a population of about 1.2 million people, the estimated number of certified security professionals in 2019 was 15, or 1 per 100,000 people. Equatorial Guinea, faces a growing deficit of 200 certified cybersecurity professionals, but this figure may even mask the scale of the problem, as there is no readily available data on the level of investment in cybersecurity by the governments.

Equatorial Guinea is gradually becoming aware of the vulnerability of its data in cyber space. Cybercrime, outsourced data storage abroad, an embryonic digital industry: Equatorial Guinea is a digital colony. Blockchain technology could help address these sovereign challenges. Awareness of Equatorial Guinea vulnerabilities in cyberspace is gradually growing. Among them, the issue of control and protection of sovereign data is the most salient aspect. Faced with the same problmms, this is why other continent's nations are increasingly pooling their thoughts, as in Lomé in March 2022 or in Abidjan on 9 and 10 May at the Cyber Africa Forum. Africa currently has only 1.3% of the world's storage capacity and Equatorial Guinea 0,001%. Thus, Equatorial Guinea outsources most of its data to foreign servers (Ireland, Netherlands, etc.). This situation poses real risks to the confidentiality, integrity and availability of their data. Security standards and regulations on access depend above all on the hosting countries. Not to mention the risks of delivering data to American companies - even on an African server - governed by the Cloud Act. These companies control nearly 70% of the storage market.

What does the Blockchain have to do with this?

Blockchain is a technology that allows data to be stored and transmitted securely. It is completely encrypted and its decentralised and distributed operation prevents state authorities from accessing the data it contains (or with great difficulty). Moreover, the immutability of the blockchain and the traceability of the operations that take place on it make any form of falsification difficult. Technically, the data is public, but it can be restricted in a "private blockchain" or a "peer-to-peer" system. "These elements are very valuable in cybersecurity because they offer strong protection against most cyber threats: malware (ransomware), data confidentiality and transmission, denial of service, etc.," says Hassan Hachem, a digital specialist with offices in Equatorial Guinea. It is in the field of storage that the blockchain has its greatest assets. In general, data clouds are managed by single players in data centres. Unencrypted, they are dependent on local regulations, not to mention the risks of availability (outage, accidental or voluntary destruction, etc.). However, the encrypted, distributed and decentralised system of the blockchain makes it possible to circumvent these aspects. It allows data to be segmented and traced on several redundant servers. In this way, each data centre has only a part of the information, making it unusable or modifiable.

Blockchain technology could accompany the gradual increase in the continent's storage capacity by guaranteeing the security of African data, even abroad. But it could also, and this is a major challenge, equip future African infrastructures. Indeed, blockchain is set to revolutionise the entire architecture of information storage in data centres, mainly because of traffic and security issues. It is precisely this evolution that Equatorial Guinea must follow as quickly as possible. This is obvious to Hassan Hachem,  who states: "Blockchain is a disruptive technology that offers immense potential - particularly in terms of data security, backup and authentication. It can therefore make our data unalterable by Blockchain layers at all levels...From civil status to secret defence documents. This is why it is fundamental for our governments to consider it as part of inclusive policies on open data and the digital transformation of African societies." To achieve this, Equatorial Guinea must continue their efforts to share knowledge and resources.

The future of cyber security in Equatorial Guinea

The issue of data repatriation is beginning to take hold in Equatorial Guinea. The construction of data centres seems to be a successful strategy in this respect. But it should not be based on technologies or designs that will be obsolete in a few years. Blockchain - a rapidly emerging disruptive technology - is already well known in Africa, such as in Kenya, a pioneer country, mainly in the field of cryptocurrencies. Equatorial Guinea should try to copy this model. As the CEO of the Brand Monitoring top, based in London and Malabo, points out: "We are all noticing the creation of fintechs galore and the rush to cryptocurrency by this new generation Z. Technologies like blockchain are within reach for our young compatriots. We owe it to ourselves to take up the challenge of being the first continent in sectors like Blockchain." Mastering Blockchain requires, above all, mastering the many technical skills associated with it (computing, mathematics, cryptography, etc.). This is a training effort that must be sustained over time. It is an imperative if Africa wishes to definitively emerge from its dependence on foreign countries. The stakes are high, because in the context of the 4th industrial revolution, digital sovereignty may mean real independence and prosperity for Africa. As Hassan Hachem points out: "It is time and we still have the means to catch up with the other continents".