Why this matters
Detecting attacks is important, but it is far cheaper to stop them in the first place. Ghanaian employers, especially banks and fintechs that follow regulator directives, expect security staff to help set up and check protective controls: who can log in, what they can reach, how data is protected and whether staff can recognise scams.
Prevention in three layers
Think of protection in three layers that support each other:
- Identity and access: making sure only the right people get in, and that each person can reach only what their job needs. Strong passwords, multi factor authentication and least privilege live here.
- Data protection: keeping information private and unchanged, even if a device is stolen or traffic is intercepted. Encryption, hashing, backups and careful handling of personal data live here.
- People: helping staff and customers recognise scams and know how to report them. Security awareness lives here.
No single layer is enough. A strong password does not help if a staff member reads out a one time code to a scammer. Encryption does not help if everyone shares one administrator account. Layers working together are sometimes called defence in depth.
Where the analyst fits
As a junior analyst you will rarely design these controls alone, but you will often: