What keeps you up at night

Issue 9 2020 Editor's Choice

As is often said, Africa is not a country, and few things bring this fact home more than KnowBe4's African edition of its annual What Keeps You up at Night Report. The 2020 edition, now available, conducted surveys in 18 African countries, asking more than 500 organisations about their concerns across a variety of security topics.

Additionally, the report provides specific survey details on the three sub-Saharan giants: Kenya, Nigeria and South Africa. These snapshots are surprising in their variations as well as overlaps. What concerns one of the economic powerhouses is not necessarily a priority for the others, and it's an eye-opener around Africa's diverse security challenges.

"It's a known fact that African countries and organisations are being targeted more actively by cybercriminals, to the level that it's one of the fastest-growing regions in terms of cybercrime," said Anna Collard, senior vice president of content strategy and evangelist, KnowBe4 Africa. "But when you get down to the specifics, the differences between the survey's continental averages and its three biggest sub-Saharan economies are quite striking."

The three respective appendices of the report make for captivating reading. Spread across six main categories – cyber threats, compliance security, security initiatives, users, resources and executive issues – here is a snapshot for each country:

Kenya: In general, Kenya is split on the priorities of security threats such as phishing and ransomware. On average, at least half of organisations don't regard these and other threats as more than somewhat concerning – considerably lower than the continental totals. But that also means that the other half of the organisations rank such threats as very concerning, with 31% saying they are kept awake at night by the possibility of business email compromise.

Kenya's concerns over security initiatives mirror the continent's worries: 46% are kept awake at night about security awareness training and supply chain security. In contrast, the country is not as concerned about different user security issues. African averages lean more towards extreme concerns, yet Kenya's focus tends to split between somewhat and very concerned.

Nigeria: Nigeria is the clear outlier in security matters, taking some very different views on what to be concerned about. On the one hand, no country is more worried about ransomware: 59% of Nigerian companies say this keeps them up at night, though 40% are only somewhat concerned. Malware attracts a similar split. Yet 74% of Nigerian companies are only somewhat concerned about data breaches.

They are not worried much about security initiatives. Only multi-factor authentication truly keeps them awake at night (74%), while the next massive concern, identity management, sits at 27%. Here's the kicker: 89% of organisations there are not at all concerned about security awareness training. When user risks do surface, two types of users solicit similar levels of security concerns – remote workers (67%) and negligent workers (41%). 87% of Nigerian companies are somewhat concerned about malicious insiders, and 69% about password sharing.

South Africa: Attitudes in South Africa align closely with the continent's averages, though there are some differences. While other countries tend to worry most about ransomware, South African organisations rank phishing as extremely (46%) and very (35%) concerning. Malware and business email compromise reflect similar levels of worry and though ransomware is lower than these categories, at 50% it's the threat keeping most businesses awake at night.

South African views around security initiatives almost mirror those of Kenya: 46% are extremely concerned about security awareness training and supply chain security. 38% are also being kept awake by privileged access management, incident response, securing the cloud and multi-factor authentication. Remote workers keep 57% of South African companies up at night, while negligent insiders (44%) and users sharing passwords (41%) are not far behind.

Download the report at https://info.knowbe4.com/what-keeps-you-up-at-night-report-af




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Global security in 2026
Editor's Choice News & Events Security Services & Risk Management Industrial (Industry) Mining (Industry)
The World Security Report 2026 states: “In a world of increasing volatility, physical security has evolved. It is no longer just a defensive measure; it is a critical driver of corporate value.”

Read more...
Who is to blame for autonomous mistakes?
Editor's Choice Security Services & Risk Management Industrial (Industry) Mining (Industry)
Most supply agreements for AI-integrated equipment still closely resemble plant hire contracts from ten years ago: bilateral, human-focused, and silent on who bears the risk when a machine makes a decision on its own.

Read more...
Beyond the checkpoint
Veracitech Editor's Choice
For decades, mining corporations have treated employee screening as a necessary friction point, an operational cost to be managed rather than a strategic capability to be optimised. A new generation of full-body X-ray technology, purpose-built for the realities of high-throughput precious-metals environments, is beginning to change that calculus.

Read more...
Persistent surveillance with rapid deployment
Editor's Choice
Sky Robots has introduced an aerial drone system designed to operate as a consistent layer within security environments, addressing long-standing challenges around visibility and response across large or complex sites.

Read more...
The control room problem that nobody wants to talk about
Technews Publishing Editor's Choice
WhatsApp has become the unofficial backbone of security communications across the mining and industrial sectors, but it was never designed to be a security tool.

Read more...
Controlling access for people and vehicles
IDEMIA STid Security Technews Publishing Editor's Choice Access Control & Identity Management Asset Management Industrial (Industry) Mining (Industry)
When it comes to access control, the security requirements of mines and the industrial sector are similar, requiring a layered approach that combines physical barriers, digital authentication, and continuous monitoring to protect personnel, assets, and operational continuity.

Read more...
The AI goldrush has a credibility problem
Refraime Editor's Choice Surveillance AI & Data Analytics
The single most important question a surveillance buyer can ask is deceptively simple: “Was this system programmed or was it trained?” That question alone will reveal more about what you are evaluating than any feature list or marketing video.

Read more...
Crime behaviour insights more important than ever
Leaderware Editor's Choice Surveillance Training & Education AI & Data Analytics
Behavioural surveillance skills are as essential now as they have ever been, especially in situations where quick evaluation of context is needed. Training operators in behavioural recognition skills is a vital part of control room success.

Read more...
Proactive estate security in Cape Town
neaMetrics OneSpace Technologies Technews Publishing SMART Security Solutions Fang Fences & Guards ATG Digital Editor's Choice News & Events Integrated Solutions Infrastructure Residential Estate (Industry)
SMART Security Solutions started the year with our annual SMART Estate Security Conference in Cape Town on 26 February 2026. Held at Anna Beulah Farm, the conference saw a number of delegates enjoying the farm’s excellent cuisine, while listening to outstanding presenters.

Read more...
How AI video is reshaping real estate security
neaMetrics TRASSIR - neaMetrics Distribution Editor's Choice
Globally, property maintenance and facility operations spending is projected to grow to over US$145 billion by 2034, reflecting rising complexity, compliance pressures, and increased exposure to operational costs. AI systems can protect properties, automate access, and optimise building management.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.