Beyond Secure Transactions: The Critical Need for Digital Proof in Tunisia’s Cybersecurity Landscape

A secure digital transaction is only half the battle. The other half lies in the ability to prove who executed it, when it occurred, with what consent, and whether its content has been altered. This was a central theme at the second edition of the National Forum on Cybercrime, Cybersecurity, and Digital Governance, organized by ESPRIT in partnership with BTK Bank on November 3, 2026, at the UTICA headquarters in Tunis.

The Shift from Protection to Proof

While protecting IT systems from cyberattacks remains a priority, discussions at the forum highlighted a distinct challenge for businesses and institutions: building digital frameworks capable of generating reliable evidence. This is particularly crucial in cases of fraud, litigation, or regulatory audits.

Nizar Ben Neji, an international advisor in digital transformation, addressed this issue in a conference focused on electronic evidence, its legal value, and its future evolution. His core argument is straightforward: the question of proof must be integrated into the design phase of any digital service, rather than being addressed reactively after a problem arises.

When a company digitizes a procedure, it must simultaneously plan how to preserve operational traces and establish their authenticity. To illustrate this, Ben Neji compared digital operations to traditional bank counter transactions. In a classic scenario, a client receives a copy of the transaction, a date, an official stamp, and signatures. These elements serve to identify the parties involved, confirm the operation, and maintain a verifiable record.

Digitalization must replicate this same level of trust. A simple SMS code does not necessarily replace an official electronic identity. Similarly, handwritten signatures must be matched by robust electronic signature and electronic stamp mechanisms that verify the integrity and authenticity of documents.

Ben Neji also emphasized the critical role of:

• Timestamping: To establish the exact date and time of an operation.
• Long-term Electronic Archiving: To ensure that evidence can be retrieved and its reliability verified years after a transaction.

He categorized electronic evidence into four main types:

1. Cryptographic Evidence: Including electronic signatures and stamps.
2. Biometric Evidence: Such as facial recognition and fingerprints.
3. Audiovisual Evidence: Including recordings and screenshots.
4. IT Traces: Logs preserved within system journals.

These elements are not limited to cybercrime investigations. They are equally vital for judicial proceedings, commercial disputes, administrative processes, and regulatory or tax audits.

Cybersecurity as a Governance Imperative

This challenge directly impacts businesses, especially those accelerating their digital transformation. For BTK Bank, cybersecurity can no longer be viewed as a mere IT issue or a technical expense.

Lassaad Ben Romdhane, General Director of BTK Bank, stated during the forum’s opening that the digitalization of financial services, the growth of electronic payments, data exploitation, and artificial intelligence are creating new opportunities for the banking sector, but also new vulnerabilities. A cyberattack can disrupt business continuity, expose sensitive data, and damage a bank’s reputation. In this industry, customer trust is a critical asset.

Ben Romdhane noted that BTK Bank has been implementing a transformation program since September 2021, with digitalization playing a strategic role. This evolution requires continuous reinforcement of:

• Control mechanisms
• Procedures
• Employee awareness
• Threat anticipation capabilities

He particularly highlighted an often underestimating dimension: human capital. Cybersecurity is not solely the domain of IT specialists; it concerns every employee and user of digital services. Consequently, training and awareness have become essential components of risk management.

ESPRIT: Bridging Research and Industry

For ESPRIT, the goal is to prepare the skills necessary for this evolving landscape. Tahar Ben Lakhdar, President, CEO, and Founder of ESPRIT, advocated for the role of research in private higher education institutions. He emphasized that an engineering school must maintain a lead over its economic environment to remain relevant amidst technological changes.

In line with this logic, ESPRIT allocates a portion of its resources to research, aiming to train engineers and managers who are immediately operational for companies. The partnership with BTK Bank reflects this commitment to bridging the academic world with professional realities.

Companies need profiles that not only master technology but also understand the risks, regulatory constraints, and economic stakes associated with digital transformation.

Conclusion: Trust as the Foundation of the Digital Economy

The discussions at this second edition of the forum extend beyond simple IT protection. They raise the fundamental question of Tunisian companies’ ability to build a digital economy based on:

• Reliable transactions
• Protected data
• Legally actionable evidence
• Adapted skills

This is a stake of paramount importance, as digital transformation cannot sustainably generate value without trust.