Forensics Digest

In this issue

The Cyber Fraud Threat Landscape: A focus on Third-Party Risk

The PwC Kenya Digital Forensics Unit has released the latest issue in our ongoing Forensics Digest series. This edition highlights six critical third-party cyber risks encountered in recent investigations we have carried out across the region. These risks reflect recurring vulnerabilities and threat patterns that organizations should be aware of to strengthen their cyber resilience. These risks include:

• Unmonitored vendor access creating shadow operational layers
• Contractual gaps that leave organizations vulnerable and unprotected
• Performance failures that enable fraud through weakened controls
• Insider threats from third-party personnel with privileged access
• Data breaches at vendor level that trigger regulatory penalties
• Reputational damage when customers hold you accountable for vendor failures

The digest also outlines solutions such as fraud risk assessments and enhanced due diligence that strengthen your third-party risk management framework.