Cisco Releases New Whitepaper

Cisco has released a new whitepaper that focuses on Africa’s resilience challenges whilst also outlining possible solutions for the same.

Titled ‘Elevating Africa’s Cyber Resilience’, the whitepaper was published by Cisco in collaboration with public policy consultancy Access Partnership, and the Centre for Human Rights at the University of Pretoria. The study analyses the cybersecurity landscape in Africa with a focus on three key areas: people technologies, and policy.

“Africa is one of the fastest-growing regions in the world for internet penetration and the use of mobile-based financial services, making it an increasingly attractive target for cybercriminals.

Businesses and the public sector urgently need to increase cyber resilience to compete globally, change the continent’s economic path and attract investment,” said Charmaine Houvet, Senior Director of Government Strategy and Policy at Cisco Africa.

Navigating Cybersecurity

With combined GDP expectations of over $4 trillion by 2027, Africa has the potential to be an economic powerhouse. Yet cybersecurity poses a huge risk. According to data cited in the study, cybercrime cost Africa more than 10 percent of its GDP in 2021, equating to roughly $4.12 billion in losses. The frequency and complexity of cyberattacks have escalated, posing a substantial barrier to the continent’s socio-economic development. In the second quarter of 2023, Africa experienced its highest average number of weekly cyberattacks per organization, reaching 2,164 attacks, a 23 percent increase from the same period in 2022. The growth of cyberattacks outpaces the development of effective response mechanisms, including robust regulatory frameworks and the training and upskilling of defenders.

People: Overcoming Africa’s Cybersecurity Skill and Gender Gap

Africa faces a severe shortage of cybersecurity professionals, with digital literacy gaps especially pronounced in rural areas and among women. Limited training programmes and resources exacerbate this issue. In 2023, Nigeria had only 8,352 cybersecurity professionals, while South Africa had 57,269, highlighting the urgent need for targeted educational initiatives and skill-building programmes.

Sectors such as manufacturing and energy exhibit relatively higher percentages of proficient cyber skills, while financial services and public administration face acute demand due to regulatory scrutiny and frequent cyber-attacks.

Public and private sector collaboration is essential to closing this skills gap. “Entities in the private sector can scale learning initiatives to improve career opportunities, boost employability and build the necessary skills required for jobs of the future,” said Houvet. For example, in the last 25 years, Cisco invested over $180 million and educated more than 1.6 million students in digital and cybersecurity skills across the continent via its Networking Academy program. In 2022, we pledged an additional $200 million to be spent over the next decade to train 3 million more students in digital skills and cybersecurity in Africa.”

Technology: Addressing Vulnerabilities and Opportunities

The rapid development of technologies such as 5G, robotic process automation, and generative AI presents renewed opportunities for cybercrime. Cyber attackers target Africa’s critical infrastructure, using advanced techniques like AI for sophisticated attacks. Common vulnerabilities include malware, social engineering, and credential compromise. 94 percent of South African organisations reported being targeted by phishing attacks in 2023, highlighting the need to build cybersecurity resilience and deploy advanced cybersecurity technologies.

These include encryption and cryptography, security information and event management (SIEM) systems, and cloud computing. AI and machine learning (ML) technologies are becoming more sophisticated, and even blockchain is being employed to enhance security.

Process: Enhancing Policies and Frameworks

Thirty-nine of 54 African nations have implemented cybersecurity legislation. However, with the increase of inter-African trade and travel, there is a growing need for a more harmonized approach.

Governments must collaborate to develop, review, and update comprehensive legislation to address new and emerging cybersecurity issues, including the protection of vulnerable and marginalised groups. Initiatives such as the adoption of the Malabo Convention and the AU’s Continental Cybersecurity Strategy are positive steps forward.

Embracing the Future

“Unlocking Africa’s potential hinges on securing its digital transformation. Every African economy, irrespective of its stage of growth, must strengthen its security resilience: protect every aspect of their business, withstand unpredictable threats and emerge stronger. Now is the time for decisive action,” concluded Houvet.