The three-day workshop, conducted by the Botswana Institute of Banking & Finance (BIBF) and Enovise from 2nd to 4th March 2026, aimed to strengthen participants' capacity to detect, analyse, and respond to cyber threats targeting the financial and banking sector within Botswana's regulatory context. Participants were taken through the threat intelligence lifecycle, threat actor profiling, MITRE ATT&CK mapping, cryptocurrency tracing, the legal and ethical limits of intelligence collection, and how to feed intelligence into SOC and fraud operations and present it to executives.
A session on the SWIFT Customer Security Program covered secure architecture, access and privileged account controls, detection of unusual payments, and preparation for the annual attestation, followed by a suspicious payment exercise. Participants also studied current fraud schemes such as business email compromise, SIM swap fraud, credential stuffing, deepfake impersonation of executives, and ATM malware, alongside detection techniques including behavioral analytics, transaction anomaly detection, and fraud kill chain modelling.
The workshop linked the technical response to Botswana's legal framework, specifically the Data Protection Act, the Cybersecurity Act, and the Cybercrime and Computer-Related Crimes Act. In a corporate account compromise exercise, participants reviewed forensic logs, assessed the exposure of personal data, and determined whether breach notification was required. The final module examined double-extortion ransomware, compromise of core banking systems, assessment of data exfiltration, cross-border data transfer considerations, and communication with the media and stakeholders.
