Why GenAI Adoption In Africa Demands CIO-Led Security

Generative AI (GenAI) is fast becoming the new engine of digital transformation. Across Africa, executives are exploring how it can reshape customer experiences, streamline operations and fuel innovation. Kenya’s fintech startups are experimenting with AI-driven fraud detection, Nigeria’s banks are testing AI chatbots for customer support, while South Africa’s healthcare providers are piloting AI for diagnostics.

The excitement is palpable. Yet, behind the optimism is a growing disconnect: CEOs are fast-moving to grow GenAI projects, while CIOs and CISOs are warning against it. They are worried about security, governance and infrastructure readiness. If left unresolved, this divide could undermine Africa’s digital economy, erode public trust and weaken the competitiveness of local enterprises in the global market.

The executive disconnect

NTT DATA’s recent global report, The AI Security Balancing Act: From Risk to Innovation, highlights a clear tension. CEOs worldwide are bullish on GenAI, with most planning to deepen their investments in the next two years. Many see tangible results already, from productivity gains to improved client engagement.

But security leaders are more reserved. They point to risks around outdated infrastructure, a lack of clear AI policies and accountability gaps. In Kenya, where many businesses still rely on hybrid systems combining legacy IT with modern cloud environments, the risks are amplified. CIOs warn that rolling out GenAI without proper guardrails could expose organisations to data breaches, regulatory penalties and reputational harm. This is not simply a clash of priorities. It reveals a governance gap: innovation ambitions are moving faster than the systems and safeguards designed to support them.

Security as a prerequisite for innovation

For African enterprises, security cannot be an afterthought. GenAI thrives on speed, scale and trust — and trust depends entirely on cybersecurity readiness. A compromised AI model in a bank could expose sensitive financial data. An AI-enabled health application trained on flawed datasets could produce dangerous misdiagnoses. Kenya and Rwanda are looking at AI to improve citizen services. Misusing AI tools could quickly make people less trust in digital government.

As CIOs know, innovation without security is fragile. Embedding cybersecurity into GenAI strategies is the only way to ensure adoption is sustainable.

Aligning the C-suite

The encouraging reality is that CIOs and CISOs are not standing in the way of innovation. On the contrary, they recognise GenAI’s transformative potential. But they also understand that its success depends on aligning ambition with governance.

This means co-owning AI strategies alongside CEOs and COOs, defining shared performance and risk metrics and treating security as a foundation rather than a “bolt-on.” Some African banks and telcos are already experimenting with this approach, with CIOs leading AI governance councils that bring security, legal and operations into the conversation. For regulated industries — from Kenya’s financial services sector overseen by the Central Bank to South Africa’s healthcare providers guided by strict data protection laws — such alignment is not optional. It is a prerequisite for trust and compliance.

Building capabilities, not just buying tools

Beyond governance, the real challenge is skills. Many security teams across Africa lack expertise in managing AI securely. This is a red flag for CIOs: deploying advanced tools without the capacity to govern them creates hidden risks.

The way forward is to invest in people while modernising infrastructure. Upskilling cybersecurity and IT teams to understand AI’s unique risks must go hand in-hand with strengthening cloud, edge and IoT environments to provide the agility GenAI requires. Partnerships are also essential. Across the region, CIOs are moving more and more from quick buy-and-deploy models to working with trusted technology providers to create new solutions. This ensures that resilience is built into adoption from the start.

The African opportunity

Kenya, Nigeria and South Africa are already positioning themselves as leaders in Africa’s AI journey. Kenya’s Silicon Savannah is home to vibrant AI-driven startups. Nigeria’s financial services sector is rapidly experimenting with GenAI to serve its young, tech-savvy population. South Africa’s enterprises, meanwhile, are testing AI in healthcare, agriculture and energy.

But to fully realise this promise, security leadership must sit at the heart of adoption. AI regulations are still changing across the continent. Businesses have a special chance to make responsible AI practices that protect citizens and build trust.

The way forward

GenAI offers African enterprises a once-in-a-generation opportunity to leapfrog into a new era of digital competitiveness. But enthusiasm alone will not secure the future. It is time for CIOs to take centre stage — aligning executive ambition with security reality. CIOs can make sure GenAI adoption in Africa is not just fast, but also safe, trusted, and transformative. They can do this by putting in place governance, investing in skills and working with other executives to create AI strategies.

Brian Kiplagat is the Head of Cybersecurity, NTT DATA East Africa