Anna Collard, SVP content strategy and evangelist at KnowBe4 Africa.

A new report finds that Africa has a ‘moderate level’ of readiness in terms of security culture.

KnowBe4, a provider of security awareness training and simulated phishing platforms, released its 2024 Security Culture Report for Africa yesterday.

The report delves deeply into the complex interplay between security practices and employee behaviours within businesses.

The research, based on surveys conducted across hundreds of businesses globally, provides a five-year comparative view, showing important changes impacting the cybersecurity landscape.

Africa's cybersecurity landscape in 2023 faced problems such as limited resources, inadequate cyber awareness, and economic restraints, according to the research; nevertheless, the continent's cybersecurity preparation efforts are now improving.

According to the research, Kenya scored 76 points, Nigeria 75, and Ghana 74, are leading the way in cybersecurity preparation, demonstrating effective measures supported by their governments.

Furthermore, the report claims Ghana's strong improvement in cybersecurity, as indicated by its rise in the Global Cybersecurity Index, indicates Africa’s dedication to cybersecurity preparedness.

The security culture score is a global metric used to assess businesses' security approaches, according to Javvad Malik, Lead Security Awareness Advocate at KnowBe4.

Malik notes: “This score reflects how much importance different entities worldwide place on cybersecurity within their organisational culture.”

Anna Collard, SVP of content strategy and evangelist for KnowBe4 Africa, says: "This demonstrates the importance of strengthening cybersecurity readiness, given the critical development requirements.

“In its section on Africa, the report reveals that organisations evaluated across 20 African countries exhibit an average security culture score of 72, consistent with the previous year. This shows a moderate level of readiness in security culture.”

According to KnowBe4, there are notable differences among industries and countries, underlining the importance of tailored efforts to improve cybersecurity resilience.

“The banking sector in Kenya is a standout performer, boasting an impressive average score of 83, attributed to its steadfast commitment to maintaining mature security cultures supported by robust security operations,” says Collard.

“However, industries such as public services, construction, education, and hospitality show lower security culture scores. This shows the importance of developing specific approaches to enhance cybersecurity awareness and practices in these sectors.”

Malik adds: “In today’s interconnected world, where a mobile device in a remote area can access sensitive accounts, working in isolation on security is no longer effective."

He continues: "Collaboration between governments and regulators is essential, not just for creating laws, but also for demonstrating practical ways to strengthen security culture. Organisations need to prioritise the human element of cybersecurity by focusing on continuous awareness and training efforts rather than relying solely on technological solutions.”