Cyber ​​strategy in Africa is more mature than ever before, with nearly three-quarters (74%) of large African companies saying they have a relatively mature approach to privacy and cybersecurity.
In addition, 75% of companies said their strategies are either regularly updated or have been created according to their threat profile with measurable KPIs.
In addition, 61% of African entities have implemented a clear approach to data protection/governance, and 80% report establishing robust frameworks and clearly defined strategies to mitigate security and privacy risks.
These are some of the findings from the KPMG Africa Cyber ​​Security Outlook 2022 survey, which reveals the state of cyber security across the continent.
According to KPMG, the report highlights that Africa’s cyber landscape is highly dynamic and rapidly evolving, fueled by widespread digitization and corresponding investment in protecting assets and data from cyber threats.
John Onyanwu, partner and head of cyber security at KPMG Nigeria & Africa, says that while the continent faces many challenges, including poverty and political conflict, the economies of many countries in the region have shown extraordinary growth.
“A number of countries are showing rapid recovery from the pandemic, with increased consumption and adoption of digital technologies at the grassroots level.”
The survey identified key areas for Africa, namely the integration of cyber security into core business strategy; more robust and risk-based regulation; active threat detection and protection; and a focus on the cyber talent pool.
Marcelo Vieira, partner and head of cyber security at KPMG South Africa, says this demonstrates the efforts of Africa’s business leaders to ensure data security in an expanding digital landscape. “As organizations undergo digital transformation, it is imperative that they make data protection and privacy a key strategic component, and we are beginning to see a massive shift on the African continent.”
The report also found that organizations in Africa with a global presence achieved greater clarity in terms of strategic cyber security direction compared to those operating exclusively in Africa.
Similarly, those operating in multiple regions of Africa have well-defined frameworks and strategies compared to organizations operating in only one country.