Cybersecurity in Lesotho: Current Challenges and Future Opportunities

Abstract

The rapid growth of digital technologies has transformed the world, enabling new opportunities while also introducing new security risks. Lesotho, like many other countries, faces a range of cybersecurity challenges that threaten the integrity of its information systems, data, and critical infrastructure. This paper provides an overview of the current state of cybersecurity in Lesotho, including the challenges faced by the country and the opportunities for improvement. One prominent cybersecurity concern is the persistent targeting of critical government systems, with a particular focus on the IFMIS (Integrated Financial Management Information System) within the Finance Ministry. This paper examines the vulnerabilities and risks associated with the IFMIS system and analyzes past cyberattacks, such as the successful breach on September 26, 2020, orchestrated by an insider within the Finance Ministry's IFMIS team. It also takes into account a recent attack on the IFMIS system that was encrypted by an unknown entity while synchronizing the backups, highlighting the ongoing threats. The paper reviews the regulatory framework for cybersecurity in Lesotho, the state of cybercrime and cyber threats, and the existing efforts to address these challenges. The paper also proposes a set of recommendations for enhancing cybersecurity in Lesotho, including measures to secure critical government systems like IFMIS to protect against future cyber threats and data breaches.