Cybersecurity in Africa: The challenges and solutions

Issue 1 2023 Training & Education, Cyber Security

Conrad Steyn.

Africa faces a significant challenge when it comes to the availability and distribution of cybersecurity talent and secure IT infrastructures. This is important because as the continent continues to undergo digital transformation, the need for security becomes more apparent. We have seen too many enterprises globally suffer from attacks that cost money or bring essential services to a halt. Something needs to change.

Facing this challenge, as well as new business circumstances that influence how we build and maintain our IT systems, we need to understand how we got here, how the world has changed, how people are working, and the various ways we can work together to instil change and nurture the next generation of security graduates and professionals.

Many attackers, few defenders

Africa has a shortage of required security skills. According to the 2022 Africa Cyber Security Outlook survey by KPMG, nearly two out of three responding enterprises reported having trouble recruiting and retaining qualified cyber professionals. This is amidst a surge in cybersecurity across all sectors, to the point that there are an estimated three-million cybersecurity job vacancies globally, which is expected to grow to 10 million in the near future.

What elevates the severity of this shortage is the fact that cyber attackers and malicious actors continue to set their sights on Africa. Interpol’s Africa Cyberthreat Assessment Report shows that the agency’s partner company, Trend Micro, recorded more than 679 million email threat detections, 8.2 million file threat detections, and 14.3 million web threat detections between January 2020 and February 2021. At the same time, the report found over 90% of businesses operate without proper security protocols. From online scams and phishing to ransomware, data-harvesting and disrupting malware, attackers are doing everything to exploit the vulnerability of organisations’ networks, applications, and users across the continent.

Setbacks and growing trends

Made up of countries with unique legislative and technical complexities, Africa is held back by limited investment. While there is definite progress in countries such as South Africa, Kenya, Egypt and Nigeria, in terms of attracting investment, the rollout creates inequities and places these nations ahead of others. Though also continually growing, the still limited number of data centres impacts the continent’s overall level of data residency and retention.

Meanwhile, next to all the opportunities it creates, remote and hybrid working has introduced new challenges to organisations devising the ideal security strategy. As more and more employees work from different locations and become more reliant on software as a service (SaaS) applications, the security perimeter expands, and existing gaps widen. Cyber attackers are cognisant of this, and as such, organisations need to take extra steps to protect their networks.

Education and other solutions

When it comes to education, collaboration is the answer. For instance, managed services and security vendors are collaborating with crucial learning institutions to introduce and offer ICT-based curriculums that cater to employment in the digital age, and uplift graduates with the skills they need to excel. Vendors themselves offer online training and certification of their specific products and systems, so that when exploring the job market, graduates have a firm grip on the tools and resources that company’s worldwide use to build and secure their infrastructure.

The Cisco Networking Academy provides IT, networking, and cybersecurity skills that translate into real-world opportunities. Having just celebrated its 25th anniversary, the academy has provided training to more than a million people across sub-Saharan Africa. With hundreds of thousands of students spread across African countries, including South Africa, Kenya, and Nigeria, the academy plays a vital role in upskilling young Africans, promoting economic and employment growth and enabling participation in the global digital economy.

Since the introduction of the academy in sub-Saharan Africa, more than 1.07 million people have been trained and upskilled. During Cisco’s 2022 fiscal year alone, more than 345 000 people were enrolled in Cisco Networking Academy courses, across 50 countries in the region. The 2022 cohort also shows that the Networking Academy is making significant progress towards the meaningful inclusion and upliftment of women in the technology industry. In South Africa, 61% of the current intake of 82 219 students are female.

Additionally, The Cisco EDGE (Experience, Design, Go-to-Market, Earn) Incubation Centre concept in Africa is a great example of a local, grassroots initiative that aims to share business knowledge, speed up entry to market and, ultimately, create new jobs for the local economy.

In light of the shortage challenge, managed service offerings that cover network, cloud, and endpoint security, as well as fully staffed security operation centres (SOCs), are becoming more popular with organisations. Cisco Edge launched a cybersecurity specialisation cohort across South Africa. This certified 11 small, medium, and micro enterprises as Cisco Express Security partners.

Not every organisation has dedicated security teams or the expertise to deal with today’s evolving cyber threats. Therefore, these partnerships are crucial to help protect and future-proof businesses adequately.

Africa's digital transformation can be accelerated through strategic partnerships between sectors and industry players, regulatory and standardised procedures, and prioritising skills development. We can shape it into a bastion of cybersecurity in the digital age and retain industry-leading professionals and systems that take us into the future and beyond.

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Prevention-first approach to cybersecurity
News Cyber Security
Check Point CEO, Gil Shwed, highlights the increasing importance of artificial intelligence in defending evolving networks and protecting against cyber threats at annual CPX 360 customer and partner event.

Eleven steps to an effective ransomware response checklist
Editor's Choice Cyber Security
Anyone is a viable target for ransomware attacks and should have a plan in place to deal with a worst-case scenario. Fortinet offers this ransomware attack response checklist to effectively deal with an active ransomware attack.

ALX sponsored learning programmes for 2023
Training & Education News
With a mission to harness Africa's abundant human capital by developing two million ethical and entrepreneurial young leaders from the continent by 2030, ALX has launched four fully sponsored (at no cost) tech programmes for 2023.

Developing an effective CCTV control room culture
Leaderware Editor's Choice CCTV, Surveillance & Remote Monitoring Training & Education
Organisational culture in organisations can be seen as the set of values, practices, focus, standards and behaviours, and ways of interacting with others that are accepted and subscribed to by the people who work there.

Hardening physical security against cyberattacks
Genetec Editor's Choice Cyber Security IT infrastructure
As the world becomes increasingly interconnected through the move to cloud computing and Internet of Things (IoT) devices, cybercrime has risen steadily, along with tools to combat it. Geopolitical tensions have the potential to rapidly unleash devastating cyberattacks worldwide.

Fast, reliable and secure cloud services
Technews Publishing Editor's Choice Cyber Security IT infrastructure
Security and speed are critical components of today’s cloud-based services infrastructure. Cloudflare offers a range of services supporting these goals beyond what most people think it does.

Mind the gap
Training & Education
The skills shortage in South Africa is less of a gap and more a gaping chasm, especially when it comes to finding or training and retaining talented people in the security industry.

Olarm launches its academy
Olarm Training & Education
Security professionals need to stay up-to-date with the latest product developments and best practices. Stay ahead in the ever-evolving security industry by accessing free educational resources and comprehensive, flexible and remote training programmes from Olarm.

Abundant scarcity
Training & Education
Organisations are fighting to find and retain skilled security talent; however, the market remains in scarcity, which makes skills development the new priority, says Innocent Baloyi, Consultant: Cloud Security at Altron Karabina.

Trellix launches Xtend Global Channel Partner Programme
News Cyber Security
Distinctive partner-first approach is designed to accelerate adoption of the Trellix XDR platform and increase cyber resilience for customers, while increasing profitability, engagement and growth for partners.