CIPC: Notification of security compromise

CIPC: Notification of security compromise logo

CIPC’s ICT technicians were alerted, due to extensive firewall and data protection systems in place at the CIPC, to a possible security compromise and as a result, certain CIPC systems were shut down immediately to mitigate any possible damage.

Through the diligent efforts of the ICT and information security teams, the compromise was isolated and curtailed and the relevant systems are back up and available for processing.

Unfortunately, certain personal information of our clients and CIPC employees was unlawfully accessed and exposed. CIPC clients are urged to be vigilant in the monitoring of credit card transactions and ONLY approve/authorise known and valid transaction requests. The extent of the exposure is being investigated and will be communicated as soon as possible.

The CIPC recognises the importance of the consistent availability of our systems and the safeguarding of information that is not in the public domain, and is working actively to minimise the impact on the CIPC clients and employees.

CIPC has apologised for any inconvenience caused and assured clients that every reasonable step is taken to ensure that all CIPC systems and platforms are safe and protected from unauthorised and/or unlawful access.

Click here to download the Notification:

https://www.cipc.co.za/wp-content/uploads/2024/02/MEDIA-RELEASE-SECTION-22-29-2-2024.pdf

Relevance to Auditors, Independent Reviewers & Accountants:

  • The Companies Act and POPIA are important pieces of legislation that your clients must comply with, and which you must assess compliance with.  If they don’t comply with the relevant laws and regulations, you have certain reporting obligations in terms of NOCLAR (NOn-Compliance with Laws And Regulations) – this could include reporting to management, qualifying your audit opinion, reporting a Reportable Irregularity, etc.
  • Where you perform these compliance tasks on behalf of your client, you and your Company Secretarial staff need to ensure that you comply with all relevant notices/enforcements/practice notes and that you are aware of the latest media statements issued by CIPC as the regulator.

Relevance to Your clients:

  • An entity (company or close corporation) has a duty to comply with the Companies Act, and all relevant notices/enforcements/practice notes and to be aware of the latest media statements issued by CIPC as the regulator.

There are not comments for this article at the moment, check back later.
You must be logged in to add a comment, log in now.
Need Help ?

Explore Smarty