Cybersecurity & Data Protection

As a cybersecurity company in Cameroon, Opesware sees the same incidents again and again: a staff email account taken over and used to send fake payment instructions, a website defaced or redirected, an accounting server encrypted by ransomware with no recent backup, a former employee who still has access to the system months later. Most of these start with simple gaps rather than sophisticated attacks. Our work is to find those gaps in your company, explain them in plain language and close them in a sensible order.

We work with SMEs, schools, clinics, microfinance institutions, NGOs and larger companies across Cameroon and the CEMAC region, on site from Douala and remotely elsewhere. You do not need a dedicated security department to work with us: in many SMEs the point of contact is the manager or the person who looks after IT alongside another job, and we adapt the depth of the audit, the language of the report and the pace of the fixes to that reality.

• Accounts and passwords: who has access to what, shared passwords, administrator rights, two-factor authentication on email and critical systems.
• Email and domain: protection against spoofing and phishing, and the settings that stop others sending mail in your name.
• Network and Wi-Fi: router and firewall configuration, guest networks, remote access and exposed services; see our networking service.
• Servers and workstations: updates, antivirus, unsupported operating systems and USB use.
• Websites and applications: vulnerability testing of your public site, client portals, APIs and mobile apps, with your written authorisation.
• Backups and recovery: whether backups exist, are kept offline or off-site, and can actually be restored.
• People and procedures: how payment changes are verified, how staff report suspicious messages, and what happens when someone leaves.

You receive a report ranking each finding by risk, with concrete fixes and an estimate of the effort involved.

An audit is only useful if the problems get fixed. We can carry out the remediation with your IT team or on your behalf: hardening servers and network equipment, setting up a firewall and VPN for remote staff, enabling two-factor authentication, separating administrator accounts, and putting automatic, tested backups in place, including copies that ransomware cannot reach. Power cuts and unstable connections are part of the design, so backups and updates still run when the network returns.

Because many incidents start with a convincing email or WhatsApp message, we also run practical awareness sessions for staff in English or French, through our IT training service. Finally, we help you write a short incident response plan: who to call, what to switch off, how to preserve evidence and how to restore operations.

In Cameroon, Law No. 2010/012 on cybersecurity and cybercriminality sets out general obligations for those who operate networks and information systems and defines offences such as unauthorised access to systems. ANTIC, the national agency for information and communication technologies, has responsibilities in this field, including security audits for certain operators. Sector rules also apply to banks, microfinance institutions and health facilities. We help you understand, in general terms, how these rules relate to your activity and organise your security so that you can demonstrate reasonable care; for formal legal advice we recommend a lawyer.

Security is also built into the software we deliver, from our Mobile Money integrations to business systems. Learn more on our cybersecurity company in Cameroon page and our article on cybersecurity services in Cameroon, or request a security audit.