As Africa undergoes rapid digital transformation, the continent faces a cybersecurity landscape that is both complex and evolving. Ahead of the Africa Tech Festival this November, three industry leaders, Dr. Harrison Nnaji, Chief Information Security Officer at First Bank Nigeria; Obed Agyarko Frimpong, Chief Information Security Officer at First National Bank Ghana; and Dr. Alfred Musarurwa, Chief Technology and Operations Officer at Stanbic Bank Zimbabwe, share their unfiltered insights on the challenges, successes, and critical conversations shaping Africa’s digital resilience.

The Real Threat Landscape

"The threat landscape has fundamentally changed over the last twelve months," says Harrison N. Nnaji. "We are no longer dealing with isolated cyber incidents but with highly organised and industrialised cybercrime ecosystems operating across borders. Artificial intelligence has become a force multiplier for attackers, enabling them to scale phishing, fraud, reconnaissance, malware development, and social engineering at unprecedented speed."

He continues, "For African organisations, the most significant threats today are AI-enabled fraud, ransomware, business email compromise, identity attacks, insider threats, supply chain compromises, and increasingly sophisticated social engineering campaigns involving deepfakes and synthetic identities. Financial institutions, governments, telecommunications providers, energy companies, and digital service providers remain prime targets because they sit at the centre of economic activities and trust."

Obed Agyarko Frimpong echoes this, stating, "The threat landscape facing African businesses has evolved significantly over the past year. While ransomware, phishing, and business email compromise remain major concerns, we are now seeing increasingly sophisticated attacks that target critical business processes, supply chains, cloud environments, and digital banking platforms."

He adds, "What has shifted meaningfully is the professionalisation of cybercrime. Threat actors are leveraging automation, artificial intelligence, and ransomware-as-a-service models, lowering the barrier to entry and increasing the scale of attacks. At the same time, rapid digital transformation across Africa has expanded the attack surface, often faster than governance and security controls can mature."

Dr. Alfred Musarurwa highlights the gravity of the situation: "Cybercrime has escalated from nuisance to national risk. Ransomware, phishing, and supply chain breaches are striking African banks and infrastructure with precision. The shift is scale and sophistication - attacks are bigger, faster, and harder to ignore."

The Hardest Gap to Close

"While skills shortages, budgets, and regulatory maturity all remain important challenges, I believe the hardest gap to close is leadership alignment around cyber resilience," says Harrison N. Nnaji. "Many organisations still view cybersecurity as a technology programme rather than an enterprise resilience capability. As a result, investments remain fragmented, risk ownership is unclear, and security initiatives often struggle to achieve business-wide adoption."

He continues, "The most resilient organisations are those where Boards, executives, risk teams, technology teams, operational units and the rest of the workforce share a common understanding of cyber risk. Cybersecurity should be measured more by an organisation's ability to anticipate, withstand, respond to, and recover from business disruptions."

Obed Agyarko Frimpong agrees, stating, "While budget and technology remain important considerations, I believe the most difficult gap to close is the human and cultural gap. Organisations can invest in advanced security tools, but cyber resilience depends heavily on leadership commitment, employee behaviour, and security being embedded into everyday business decisions. Many incidents still originate from human actions, whether through social engineering, poor cyber hygiene, or inadequate oversight of third-party risks."

Dr. Alfred Musarurwa adds,

"Money helps, but people matter more. The cybersecurity skills gap is Africa’s Achilles heel. Without trained professionals, strategies remain paper-thin and resilience stays out of reach."

A Win Worth Highlighting

Harrison N. Nnaji points to a shift in mindset within the financial services sector: "One of the most encouraging developments across Africa is the growing shift from a compliance-centric mindset to a resilience-centric mindset within sectors such as financial services. Leading financial institutions are investing not only in protection technologies but also in cyber threat intelligence, threat hunting, identity security, attack simulation exercises, incident preparedness, and executive cyber governance. They recognise that prevention alone is no longer sufficient as the core objective today is resilience."

Obed Agyarko Frimpong highlights the role of governance and collaboration: "We are seeing organisations adopt internationally recognised frameworks such as ISO/IEC 27001, strengthen cyber governance structures, and integrate security into digital transformation initiatives from the outset rather than as an afterthought. A particularly positive trend is the emergence of stronger regulatory frameworks and industry-wide collaboration through sector security forums, cyber information-sharing initiatives, and national cybersecurity strategies."

Dr. Alfred Musarurwa underscores the importance of leadership: "Financial services are showing the way. Banks that made cybersecurity a boardroom priority now enjoy fewer breaches and stronger trust. Leadership buy-in turned defence into a competitive edge."

What Needs to Be Part of the Conversation Next?

"The conversation I would most like to witness is an elevated intersection of Artificial Intelligence, business aspirations, Trust, and Governance," says Harrison N. Nnaji. "The industry is understandably excited about AI's transformative potential. However, we must devote equal attention to securing AI systems, governing their usage, managing model drift risk, protecting data integrity, and ensuring accountability for AI-driven decisions."

He adds, "We must move beyond asking how quickly we can deploy AI and begin asking how responsibly we can deploy it. The future challenge is not whether organisations will adopt AI. That question has already been answered. The real question is whether we can deploy AI in a way that preserves trust, privacy, security, resilience, and regulatory confidence."

Obed Agyarko Frimpong calls for collective defence: "AI is creating enormous opportunities for African organisations, but it is also providing new capabilities to adversaries. We need a balanced discussion that addresses both innovation and security, ensuring that organisations integrate governance, risk management, and security controls as they accelerate adoption of emerging technologies. I would also like to see greater focus on collective defence. No organisation can address today's cyber threats alone. Public-private partnerships, intelligence sharing, workforce development, and cross-border collaboration will be critical to strengthening Africa's cyber ecosystem."

Dr. Alfred Musarurwa concludes, "Collaboration must move centre stage. Governments, regulators, and businesses can’t fight alone. True resilience will only come when Africa builds a united cybersecurity front."

Conclusion: Securing Africa’s Digital Future

"Cybersecurity is no longer about protecting systems alone," says Harrison N. Nnaji. "It is about protecting trust, enabling resilience, and safeguarding the confidence that powers Africa's digital economy. In an era of intelligent threats, resilience will become the defining competitive advantage."

Obed Agyarko Frimpong adds, "Cybersecurity should not be viewed as a barrier to innovation. When implemented effectively, it is an enabler of trust, resilience, and sustainable digital growth. The organisations that will thrive in the digital economy are those that build security into their strategy from the beginning, rather than trying to bolt it on later."

Dr. Alfred Musarurwa reinforces the call for unity: "I look forward to continuing this conversation at the festival and driving meaningful dialogue on Africa’s digital resilience."

Join the conversation at Africa Tech Festival this November and be part of shaping Africa’s digital resilience. Together, we can build a secure and innovative future for the continent. Register now to secure your place!