Jamaica is unduly overconfident in its ability to respond to cyber attacks, a representative from the Inter-American Development Bank (IDB) has asserted.

Speaking at the PSOJ/IDB EmpowerJA: Building Bridges for Success Forum, Benjamin Roseth, senior specialist in modernisation of the state at the IDB, revealed on Thursday, January 18, findings from a survey conducted among PSOJ membership that found that in the best case scenario, only 53 per cent of businesses have an incident response plan, 50 per cent have a designated cybersecurity professional on staff, and only seven per cent are fully prepared for the Data Protection Act that came into effect on December 1, 2023.

He explained that the survey results are not representative of the entire PSOJ, as it was completed by 105 out of 308 members, assuming that the recipients who completed the survey are those most knowledgeable and interested in the subject.

He continued, “Just about 40 per cent of respondents said a cyber attack against their business is unlikely, despite over 90 per cent having an online presence and 83 per cent of businesses reported that they are confident in their ability to respond to attacks, if you look at any data for Jamaica and the wider world this is not the case; cyber attacks are becoming increasingly easier to execute and are thus increasing exponentially.”

The IDB recommended that Jamaican businesses implement the following where applicable:

1. conducting cyber readiness self-assessment tests to understand weaknesses and vulnerabilities and improve awareness.
2. Liaise with government entities to become aware of what cybersecurity-related services they provide such as recommended practices and information on emerging threats.
3. Increase investment in cybersecurity by hiring more cyber professionals either in-house or on contract.

Speaking with Our Today, Godphey Sterling, head of the Jamaica Cyber Incident Response Team (JaCIRT) in the Office of the Prime Minister, explained that the operation centre for JaCIRT offers vulnerability testing and penetration testing for business. He explained that entities seeking penetration testing must first make a formal request to the permanent secretary in the Office of the Prime Minister.