Hacking with an impact

Start to hack

"I am part of a team of ethical hackers at KBC. Before the bank launches new software, we intensively search for vulnerabilities. When necessary, adjustments are made so that hackers with less good intentions don't get the chance to steal money or information. Security and trust are extremely important to a bank. 

And the same goes for microfinance institutions (MFIs). Cybersecurity is an important subject for BRS partners. A specific request came from two Philippine MFIs to train their IT staff in ethical hacking. That's how BRS came to me. 

I didn't hesitate for a second. I love teaching. Besides working at KBC, I teach courses on cybersecurity and application security in two colleges.  So I was immediately up for a Start to Hack course for the IT professionals at these MFIs: K-Coop in Manila, aimed at the poorest of the poor in the city, and GSAC, focused on rural farmers.

Different context different approach

We quickly found that the context in which these institutions operate is very different from KBC. 

In Belgium, we start from a well-secured system and work from there. For instance, we send phishing mails to staff to make them aware of the dangers. An exercise we couldn't just repeat as such in the Philippines. Not every organisation has a central mail system. Often staff work separately on their own computers. With a personal e-mail address and without an overarching security system. 

Customers also mentioned that they cannot use their MFI's app because their phone is too old and cannot handle the new software. The question then is whether it makes sense to invest in the latest security gadgets. These may make your app more secure, but also unusable for your customers. 

Additionally, it is not obvious to find well-trained employees in rural areas. They do exist, but after their studies, young Filipinos prefer to move to the city.

And other solutions

All these elements made it clear that ethical hacking to secure their apps is not necessarily a top priority.And a lot of gains can be made by focussing on their infrastructure. 

In doing so, we did not answer their original question, but they were very open to this feedback. We discussed what would make sense and fine-tuned the content of our workshop. 

Ethical hacking was not completely dropped. To get them excited about this, we did an exercise together. And I showed them what tools are available online. For now, they can get by just fine with automatic scanners, programmes that go through your system and pick out the more obvious vulnerabilities. 

Driven by idealism

The enthusiasm of the participants in this workshop was very contagious. That made this assignment really fun. They are so driven and motivated. They really want to help people move forward, support their communities. They do their work out of idealism, not just for the pay. 

We felt that drive from the clients too. In Manila, we visited a savings group made up mainly of women. One of them was celebrated for being the best saver that week. Very proudly, she brought in her savings. Seven euros. I had to swallow. To us it looks like nothing, IS nothing, but to them that is really a lot of money. That touched me. 

Poor and enterprising

You sometimes hear that people are poor because they don't manage their money well. This is clearly not true. Because with the little they have - barely enough to buy food - they still manage to put something aside every week. I found that particularly impressive. 

The cooperative members themselves are very modest about what they achieve. At GSAC, we visited two brothers who run a farm together, an ecofarm, where recycling is central. And they are one of the first in the region to also focus on agritourism. They built their farm all by themselves. Literally constructed everything themselves. "Not quite all by themselves," they corrected us. "Some beams were too heavy to lift with two, we had to carry them with four." 

The youngest

Before visiting the Philippines, I couldn't really imagine the practice of microfinance. Now I understand the impact these cooperatives have on society. 

And it's nice when you can help them grow further. I hope my contribution could mean something to them. I am very happy that I got the chance to do this. To be able to do this now, at the age of 25. Apparently this makes me the youngest KBC employee to volunteer for BRS. I consider myself very lucky!