Deputy Minister Kenny Morolong: Africa Cybersecurity Indaba 2026

Distinguished guests,
Representatives of government, the private sector, the technology industry and the cybersecurity community,
Members of academia and the media present here today.
Ladies and gentlemen,

It is a pleasure to join you at this important engagement, which brings into focus one of the defining challenges of our time: how we secure our societies, economies and institutions in an increasingly digital world.

I wish to thank the organisers for convening this important engagement and for creating a space in which we can exchange ideas, strengthen partnerships and consider practical responses to the cybersecurity challenges confronting our continent.

Africa is emerging as an increasingly active participant in the digital revolution. Many countries across the continent are embracing digital technologies across a range of sectors, ultimately transforming how people communicate, conduct business, access public services, and participate in the economy.

While these developments are critical to advancing Africa's economic development agenda, one important question remains: how prepared are we to protect our countries, our economies and our people against the growing threat of cybercrime?

A 2026 publication by the United Nations Institute for Disarmament Research estimates that cybercrime disruptions cost the global economy close to US$10 trillion (approximately R166 trillion) in economic value in 2025. These crimes are not confined by national borders. They range from online fraud and identity theft to ransomware attacks, the theft of personal information and the disruption of essential services.

The threat is particularly concerning across Africa. According to INTERPOL's African Cyberthreat Assessment Report 2026, estimated cybercrimerelated losses reported across the continent increased from US$192 million in 2024 to US$484 million in 2025.

The report also found that artificial intelligence was enabling 55 per cent of reported cybercrimes across Africa, making it easier for criminals to automate scams, impersonate legitimate individuals and exploit unsuspecting victims.

These findings demonstrate how rapidly the threat is evolving and the growing challenge it presents to law enforcement, businesses and ordinary citizens. South Africa is not immune to these developments. The South African Banking Risk Information Centre (SABRIC) reported that losses from digital banking crime increased to R2.4 billion in 2025, compared with approximately R1.9 billion in 2024.

Banking application-related crime accounted for more than 70 per cent of reported digital banking losses. Behind these figures are individuals who may lose their savings, businesses exposed to financial losses, families whose financial security is placed at risk, and Government institutions whose systems, public resources and sensitive citizen information may be compromised.

Programme Director, cybersecurity is not separate from Africa's development agenda; it is in fact one of the conditions necessary to sustain digital innovation and ensure that the benefits of technological progress translate into meaningful improvements in people's lives.

The African Union's Digital Transformation Strategy for Africa (2020-2030) envisions "an integrated and inclusive digital society and economy in Africa that improves the quality of life for Africans".

This vision recognises that digital transformation is an important driver of inclusive and sustainable growth, economic integration and job creation. However, realising this ambition requires more than expanding digital connectivity and adopting new technologies.

It requires creating a secure and trusted digital environment in which our people, businesses and institutions can participate with confidence. This commitment is reinforced by the African Union Convention on Cyber Security and Personal Data Protection, also known as the Malabo Convention, which provides a continental framework for addressing cybersecurity.

At regional level, the Southern African Development Community's (SADC) Digital Transformation Strategy recognises the development opportunities presented by digital technologies and the cybersecurity risks that must be managed.

These frameworks reflect a shared understanding that digital development and cybersecurity must advance together. For Africa, this means ensuring that our digital systems are adequately protected. It means being vigilant, safeguarding citizens' personal information and protecting critical infrastructure.

Ladies and Gentlemen,

Therefore, as we consider how to build resilient cyberspaces across our continent, allow me to highlight several priorities that require our collective attention and action, and the first one being to collaborate as African countries in the fight against cybercrime. This growing threat of cybercrime requires us to roll up our sleeves and fight for the security of our continent.

This demands a coordinated and determined response from all of us. Behind every cybercrime is a criminal who is ruthless and patient, always searching for the weakest link and the widest gap between us. Our strongest answer is to leave no gaps to find.

African countries are pursuing digital transformation at different speeds, and with different levels of institutional capacity. But cyberthreats don't respect those differences. They move quickly from one country to the next, exploiting gaps in technical capability, in legislation, and in cross-border cooperation.

This then indicates that no country can address this challenge in isolation. We must strengthen cooperation between African governments and cybersecurity agencies, together with our various legal institutions.

I say this because through sustainable partnerships, we can build a more coordinated continental response to cybercrime and prevent these cybercriminals from exploiting the very digital advances that are central to Africa's development.

The AU has already laid important groundwork on cybersecurity and data protection. Now we must build on it together. This means finding greater alignment in our national approaches, learning from one another and adopting the best practices that suit our national contexts.

That is why platforms such as these, the Africa Cybersecurity Indaba are necessary. They allow us to exchange knowledge, share practical experiences, and build partnerships that turn shared learning into real progress. Programme Director, allow me then to bring in again one of the critical issues to fighting cybercrime. "The role of communication in building cyber resilience"

At the heart of cybersecurity is the citizen who must be protected. Behind every digital platform, online transaction and electronic public service is a person whose personal information, financial security and trust must be safeguarded.

Technology and legislation are essential to securing cyberspace. But their effectiveness also depends on the awareness, knowledge and everyday decisions of the people who use these systems.

This is why public awareness, and education must be central to our cybersecurity response. Community media such as radio and newspapers, together with social media, have an important role to play in building resilient communities that understand cybersecurity.

The methods used by criminals continue to evolve, from phishing and impersonation to romance scams, in which fraudsters build false online relationships to manipulate victims into handing over money, and investment scams that promise unrealistic returns.

These schemes leave victims with significant financial and emotional harm. The scale of the problem in South Africa reinforces the need for greater public awareness. Statistics South Africa estimated that approximately 1 million people experienced consumer fraud in 2024/25, while the South

African Police Service has investigated individual romance-fraud cases involving millions of rands. In one case reported by the Hawks in March 2026, an alleged romance-fraud and money-laundering scheme involved more than R14 million.

Communication has a critical role to play here. It allows us to translate complex cybersecurity risks into practical information that people can understand and apply in their daily lives.

Our responsibility is to make sure that cybersecurity awareness reaches every community, across all ages, levels of digital literacy and socioeconomic circumstances, so that no citizen is left without the knowledge to navigate the digital environment safely.

In South Africa, the Government Communication and Information System (GCIS) leads and coordinates government communication to ensure that the public has access to information that is timely, accurate and accessible.

The GCIS also plays an important role in nurturing community radio stations through the Media Development and Diversity Agency (MDDA), helping to ensure that these platforms remain accessible to the communities they serve and so that they can play an important role in public education, such as on these issues we are discussing today.

In the cybersecurity space, this partnership between government and the media is equally important in helping citizens navigate the digital environment safely.

The GCIS is currently running a campaign on misinformation and disinformation to raise awareness about the spread of false or misleading information, particularly online. Through collaboration with relevant stakeholders and the use of accessible communication platforms, including community media, these efforts can help citizens understand the importance of verifying information and using trusted sources.

But at the same time, citizens must understand that a message should not be trusted simply because it carries a familiar logo or appears to come from a known telephone number or social media account.

Always verify before you press that button or give the scammers an OTP number that appears from nowhere!

Equally important, those who fall victim to cybercrime must be encouraged to report incidents and seek assistance without fear of humiliation or blame.

Ladies and gentlemen, as I conclude on this matter, allow me to highlight several priorities that should guide our collective efforts.

First, we must make cybersecurity a leadership priority. As Government, institutions and leaders across all sectors, we share a responsibility to ensure that cybersecurity receives the attention and resources it deserves. This means taking responsibility for protecting our systems and information, strengthening our capacity to respond to threats and making cybersecurity an integral part of how we plan, make decisions and deliver services.

Second, we must invest in people. Cybersecurity education, digital literacy and specialised training should form part of our long-term development agenda. The next generation must be equipped to protect digital systems and develop solutions for emerging threats.

Third, we must put citizens at the centre of our efforts. Public awareness campaigns should provide practical guidance, use accessible language and reach people across different communities and levels of digital literacy.

Fourth, we must strengthen partnerships and information-sharing. Government, business, academia and civil society must work together, while African countries deepen regional cooperation and improve the ability to investigate cross-border cybercrime.

Finally, we must measure progress by the resilience we build and the people we protect. The success of our efforts should be reflected in better preparedness, stronger institutional capacity, reduced exposure to cyber risks and greater public confidence in digital services.

Programme Director, the digital future of Africa will be shaped not only by how quickly we adopt new technologies, but also by how responsibly we manage them.

We cannot eliminate every cyber risk. But we can, however, reduce vulnerabilities, improve preparedness, respond more effectively to incidents, and ensure that citizens and institutions are better equipped to navigate the digital environment.

The task before us is to build a continent that is not merely connected or technologically advanced, but secure, resilient, and an active contributor to the development of technologies and standards that serve our people.

Let this Indaba be an opportunity to move beyond identifying the threats and towards practical, measurable action. Let our discussions produce stronger partnerships, clearer responsibilities and lasting commitments to protecting our digital future.

I thank you!

#GovZAUpdates