Hassan Hachem Equatorial Guinea, digital sovereignty and cybersecurity
Equatorial Guinea’s Cybersecurity Gap
Equatorial maybe on its way to becoming highly connected to cyberspace. This is evidenced by the fact that the population's internet access rate has doubled in a few years, reaching 26%
in 2015 (LiveStats). But cybercrime is also increasing in Equatorial Guinea.
Hassan Hachem, a 38 year digital space expert with offices in Equatorial
Guinea, explains what is at stake and what public actions should be taken.
Although this figure places the continent far behind Europe or Asia, it shows a
steady increase in the Internet connectivity of the Equatorial Guinean
population. This unfortunately goes hand in hand with the multiplication of
cyber threats, a 2.0 crime that the country concerned is trying to eradicate, most often with laws and
warning centres created to prevent cyber attacks. Equatorial Guinea could be
more reactive on the subject by creating like Morocco, a national strategy to combat cybercrime by multiplying the number of dedicated structures. In West Africa, Senegal has created a National Cyber Security Centre (CNC), as well as a laboratory, which depends on the national police.
Hassan Hachem is a great supporter of countries creating national institutions. "Cybercrime transcends borders and regions. Providing answers country by country will be futile. We need regional solutions",
Hassan Hachem explains. Indeed, instead of West African cooperation, ECOWAS countries prefer other organisations or other countries such as France. After Morocco and Gabon, the "Agence nationale de la sécurité des systèmes d'informations" (ANSSI), a French institution reporting to the Prime Minister, has, for example, established a partnership with the "Agence de l'informatique de l'État" (ADIE) of Senegal in 2016.
It could be an example of cooperation for Equatorial Guinea. The failure of the AU Convention - or Malabo Convention - illustrates the lack of interest in transnational cooperation by African countries.
For Hassan Hachem, the reason is clear: "States are afraid of losing their sovereignty. The means of fighting cybercrime do not give states much more authority. Regional cooperation implies a loss of influence for states, and that is hard for most of them to accept. But for such a task as fighting cyber attacks, the solution must be global. The current response
in Equatorial Guinea is insufficient.
In the absence of transnational cooperation, the countries affected by the cyber attacks, have opted first and foremost for the judicial framework, the drafting of a law. But is this approach the most appropriate? "Making a law is not enough," replies many specialists in IT and new technologies.
The fight against cybercrime is a 360° problem. However, a law only regulates two aspects of such a phenomenon: access to data and the conditions under which they are transmitted.
The law is an essential part of the fight against cyber threats, but it is only the first step in an global cybersecurity strategy. It must be complemented by projects,
Equatorial Guinea must create tools that allow them to really fight cyberhacktivists, such as learning to code. Computer security is only composed of algorithms.
Equatorial Guinea must be able to train computer engineers locally, and allow them to acquire mathematical skills. This potential of African computer scientists represents a real market. If
Equatorial Guinea was to move in this direction, it could lead to less concern
about cyber threats. Indeed, Equatorial Guinea lacks the talent and resources to deal with its cybersecurity threats. Out of a population of about 1.2
million people, the estimated number of certified security professionals in 2019 was
15, or 1 per 100,000 people. Equatorial Guinea, faces a growing deficit of 200 certified cybersecurity professionals, but this figure may even mask the scale of the problem, as there is no readily available data on the level of investment in cybersecurity
by the governments.
Equatorial Guinea is gradually becoming aware of the vulnerability of its
data in cyber space. Cybercrime, outsourced data storage abroad, an embryonic
digital industry: Equatorial Guinea is a digital colony. Blockchain technology could help address these sovereign challenges.
Awareness of Equatorial Guinea vulnerabilities in cyberspace is gradually
growing. Among them, the issue of control and protection of sovereign data is
the most salient aspect. Faced with the same problmms, this is why other continent's nations are increasingly pooling their thoughts, as in Lomé in March 2022 or in Abidjan on 9 and 10 May at the Cyber Africa Forum.
Africa currently has only 1.3% of the world's storage capacity and Equatorial
Guinea 0,001%. Thus, Equatorial Guinea outsources most of its data to foreign servers (Ireland, Netherlands, etc.). This situation poses real risks to the confidentiality, integrity and availability of their data. Security standards and regulations on access depend above all on the hosting countries.
Not to mention the risks of delivering data to American companies - even on an African server - governed by the Cloud Act. These companies control nearly 70% of the storage market.
What does the Blockchain have to do with this?
Blockchain is a technology that allows data to be stored and transmitted
securely. It is completely encrypted and its decentralised and distributed
operation prevents state authorities from accessing the data it contains (or
with great difficulty). Moreover, the immutability of the blockchain and the
traceability of the operations that take place on it make any form of
falsification difficult. Technically, the data is public, but it can be
restricted in a "private blockchain" or a "peer-to-peer" system. "These elements
are very valuable in cybersecurity because they offer strong protection against
most cyber threats: malware (ransomware), data confidentiality and transmission,
denial of service, etc.," says Hassan Hachem, a digital specialist with offices
in Equatorial Guinea. It is in the field of storage that the blockchain has its greatest assets. In general, data clouds are managed by single players in data centres. Unencrypted, they are dependent on local regulations, not to mention the risks of availability (outage, accidental or voluntary destruction, etc.). However, the encrypted, distributed and decentralised system of the blockchain makes it possible to circumvent these aspects. It allows data to be segmented and traced on several redundant servers. In this way, each data centre has only a part of the information, making it unusable or modifiable.
Blockchain technology could accompany the gradual increase in the continent's
storage capacity by guaranteeing the security of African data, even abroad. But
it could also, and this is a major challenge, equip future African
infrastructures. Indeed, blockchain is set to revolutionise the entire
architecture of information storage in data centres, mainly because of traffic
and security issues. It is precisely this evolution that Equatorial Guinea must follow as quickly as possible. This is obvious to
Hassan Hachem, who states: "Blockchain is a disruptive technology that offers immense potential - particularly in terms of data security, backup and authentication. It can therefore make our data unalterable by Blockchain layers at all levels...From civil status to secret defence documents. This is why it is fundamental for our governments to consider it as part of inclusive policies on open data and the digital transformation of African societies." To achieve this,
Equatorial Guinea must continue their efforts to share knowledge and resources.
The future of cyber security in Equatorial Guinea
The issue of data repatriation is beginning to take hold in Equatorial Guinea. The construction of data centres seems to be a successful strategy in this respect. But it should not be based on technologies or designs that will be obsolete in a few years.
Blockchain - a rapidly emerging disruptive technology - is already well known in
Africa, such as in Kenya, a pioneer country, mainly in the field of cryptocurrencies.
Equatorial Guinea should try to copy this model. As the CEO of the Brand
Monitoring top, based in London and Malabo, points out: "We are all noticing the creation of fintechs galore and the rush to cryptocurrency by this new generation Z. Technologies like blockchain are within reach for our young compatriots. We owe it to ourselves to take up the challenge of being the first continent in sectors like Blockchain."
Mastering Blockchain requires, above all, mastering the many technical skills associated with it (computing, mathematics, cryptography, etc.). This is a training effort that must be sustained over time. It is an imperative if Africa wishes to definitively emerge from its dependence on foreign countries. The stakes are high, because in the context of the 4th industrial revolution, digital sovereignty may mean real independence and prosperity for Africa. As Hassan Hachem points out: "It is time and we still have the means to catch up with the other continents".