Cybersecurity in Africa: The challenges and solutions

Issue 1 2023 Training & Education, Information Security


Conrad Steyn.

Africa faces a significant challenge when it comes to the availability and distribution of cybersecurity talent and secure IT infrastructures. This is important because as the continent continues to undergo digital transformation, the need for security becomes more apparent. We have seen too many enterprises globally suffer from attacks that cost money or bring essential services to a halt. Something needs to change.

Facing this challenge, as well as new business circumstances that influence how we build and maintain our IT systems, we need to understand how we got here, how the world has changed, how people are working, and the various ways we can work together to instil change and nurture the next generation of security graduates and professionals.

Many attackers, few defenders

Africa has a shortage of required security skills. According to the 2022 Africa Cyber Security Outlook survey by KPMG, nearly two out of three responding enterprises reported having trouble recruiting and retaining qualified cyber professionals. This is amidst a surge in cybersecurity across all sectors, to the point that there are an estimated three-million cybersecurity job vacancies globally, which is expected to grow to 10 million in the near future.

What elevates the severity of this shortage is the fact that cyber attackers and malicious actors continue to set their sights on Africa. Interpol’s Africa Cyberthreat Assessment Report shows that the agency’s partner company, Trend Micro, recorded more than 679 million email threat detections, 8.2 million file threat detections, and 14.3 million web threat detections between January 2020 and February 2021. At the same time, the report found over 90% of businesses operate without proper security protocols. From online scams and phishing to ransomware, data-harvesting and disrupting malware, attackers are doing everything to exploit the vulnerability of organisations’ networks, applications, and users across the continent.

Setbacks and growing trends

Made up of countries with unique legislative and technical complexities, Africa is held back by limited investment. While there is definite progress in countries such as South Africa, Kenya, Egypt and Nigeria, in terms of attracting investment, the rollout creates inequities and places these nations ahead of others. Though also continually growing, the still limited number of data centres impacts the continent’s overall level of data residency and retention.

Meanwhile, next to all the opportunities it creates, remote and hybrid working has introduced new challenges to organisations devising the ideal security strategy. As more and more employees work from different locations and become more reliant on software as a service (SaaS) applications, the security perimeter expands, and existing gaps widen. Cyber attackers are cognisant of this, and as such, organisations need to take extra steps to protect their networks.

Education and other solutions

When it comes to education, collaboration is the answer. For instance, managed services and security vendors are collaborating with crucial learning institutions to introduce and offer ICT-based curriculums that cater to employment in the digital age, and uplift graduates with the skills they need to excel. Vendors themselves offer online training and certification of their specific products and systems, so that when exploring the job market, graduates have a firm grip on the tools and resources that company’s worldwide use to build and secure their infrastructure.

The Cisco Networking Academy provides IT, networking, and cybersecurity skills that translate into real-world opportunities. Having just celebrated its 25th anniversary, the academy has provided training to more than a million people across sub-Saharan Africa. With hundreds of thousands of students spread across African countries, including South Africa, Kenya, and Nigeria, the academy plays a vital role in upskilling young Africans, promoting economic and employment growth and enabling participation in the global digital economy.

Since the introduction of the academy in sub-Saharan Africa, more than 1.07 million people have been trained and upskilled. During Cisco’s 2022 fiscal year alone, more than 345 000 people were enrolled in Cisco Networking Academy courses, across 50 countries in the region. The 2022 cohort also shows that the Networking Academy is making significant progress towards the meaningful inclusion and upliftment of women in the technology industry. In South Africa, 61% of the current intake of 82 219 students are female.

Additionally, The Cisco EDGE (Experience, Design, Go-to-Market, Earn) Incubation Centre concept in Africa is a great example of a local, grassroots initiative that aims to share business knowledge, speed up entry to market and, ultimately, create new jobs for the local economy.

In light of the shortage challenge, managed service offerings that cover network, cloud, and endpoint security, as well as fully staffed security operation centres (SOCs), are becoming more popular with organisations. Cisco Edge launched a cybersecurity specialisation cohort across South Africa. This certified 11 small, medium, and micro enterprises as Cisco Express Security partners.

Not every organisation has dedicated security teams or the expertise to deal with today’s evolving cyber threats. Therefore, these partnerships are crucial to help protect and future-proof businesses adequately.

Africa's digital transformation can be accelerated through strategic partnerships between sectors and industry players, regulatory and standardised procedures, and prioritising skills development. We can shape it into a bastion of cybersecurity in the digital age and retain industry-leading professionals and systems that take us into the future and beyond.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

SMARTpod talks to The Risk Management Forum
SMART Security Solutions Editor's Choice News & Events Security Services & Risk Management Videos Training & Education
SMART Security Solutions recently released its first SMARTpod podcast, discussing the upcoming Risk Management Forum Conference 2024, which will be held on 26 September 2024 at the Indaba Conference Centre in Fourways, Johannesburg.

Read more...
There is a SaaS for everything, but at what cost, especially to SMEs?
Editor's Choice Information Security Security Services & Risk Management
Relying on SaaS platforms presents significant cybersecurity risks as the number of providers in your landscape increases, expanding your attack surface. It is important to assess the strength of the SaaS providers in your chain.

Read more...
Addressing today’s mining challenges: cyber risks beyond IT
Editor's Choice Information Security Mining (Industry)
Despite the mining industry’s operational technology systems being vulnerable to cyberattacks, many decision-makers still see these threats as purely an IT issue, even though a breach could potentially disrupt mining operations.

Read more...
How to effectively share household devices
Smart Home Automation Information Security
Sharing electronic devices within a household is unavoidable. South African teens spend over eight hours per day online, making device sharing among family members commonplace. Fortunately, there are methods to guarantee safe usage for everyone.

Read more...
How to securely manage your digital footprint
Information Security Training & Education
Managing your online presence is critical to safeguarding your privacy and security. It is imperative to take a proactive approach, including using robust cybersecurity best practices.

Read more...
Fortinet establishes new point-of-presence in South Africa
News & Events Information Security
Fortinet has announced the launch of a new dedicated point-of-presence (POP) in Isando, Johannesburg, to expand the reach and availability of Fortinet Unified SASE for customers across South Africa and southern African countries.

Read more...
New tools for investigation and robust infrastructure security
News & Events Information Security
Cybereason continues to enhance its security platform, with recent updates introducing improvements in file search operations, investigation query results, and cloud workload protection, providing more granular data and faster key artefact identification.

Read more...
Cybersecurity fatigue: A growing risk with AI-driven social engineering attacks
Information Security Training & Education
Despite the significant amounts of time and money invested in cybersecurity training and awareness, employee carelessness and ignorance remain the most vulnerable parts of the average enterprise’s security posture.

Read more...
NEC XON shares lessons learned from ransomware attacks
NEC XON Editor's Choice Information Security
NEC XON has handled many ransomware attacks. We've distilled key insights and listed them in this article to better equip companies and individuals for scenarios like this, which many will say are an inevitable reality in today’s environment.

Read more...
Cybersecurity and AI
AI & Data Analytics Information Security
Cybersecurity is one of the primary reasons that detecting the commonalities and threats of what is otherwise completely unknown is possible with tools such as SIEM and endpoint protection platforms.

Read more...