Key Issues in Addressing Cybersecurity Challenges on the African Continent
DOI:
https://doi.org/10.12700/jceeas.2026.6.2.469Keywords:
cybersecurity, cyber-governance, Malabo Convention, security requirements, national responsibilityAbstract
This study examines the strategic-level characteristics of the cybersecurity frameworks within African Union Member States. While cybersecurity remains under national jurisdiction, the African Union holds the responsibility to support Member States in developing and maintaining their national capabilities. The paper evaluates the cybersecurity requirements established by the Malabo Convention and presents the supplementary initiatives and programs designed to support its implementation. By detailing the specific elements of national cybersecurity frameworks, the study provides a comprehensive assessment of the current landscape. Finally, the analysis of continental-level organizational structures highlights the key components of strategic and operational support. The overview emphasizes the critical role of the forthcoming African Union Cybersecurity Strategy, as well as the significance of measurement and feedback mechanisms that objectively reflect political-strategic decision-making and practical implementation.
References
AfricaCERT. (n.d.). African Computer Security Incident Response Teams: Mandate and Core Focus. Retrieved 11 03, 2025, from https://portal.africacert.org/about/
African Researchers Magazine. (2025). The Malabo Convention: Africa’s Cybersecurity and Data Protection Framework Explained. Retrieved 12 02, 2025, from https://www.africanresearchers.org/the-malabo-convention-africas-cybersecurity-and-data-protection-framework-explained
African Union. (2000). Constitutive Act of the African Union. Retrieved 10 25, 2025, from https://au.int/sites/default/files/pages/34873-file-constitutiveact_en.pdf
African Union. (2014). Convention on Cyber Security and Personal Data Protection (Malabo Convention). Retrieved 11 25, 2025, from https://au.int/en/treaties/african-union-convention-cyber-security-and-personal-data-protection
African Union. (2024). Africa at Forefront of Championing Cybersecurity and Digital Transformation in the Global Arena. Retrieved 10 28, 2025, from https://au.int/en/pressreleases/20240816/africa-forefront-championing-cybersecurity-and-digital-transformation
African Union Commission. (2020). The Digital Transformation Strategy for Africa (2020–2030). Retrieved 11 02, 2025, from https://au.int/sites/default/files/documents/38507-doc-DTS_for_Africa_2020-2030_English.pdf
African Union Commission. (2024). African Digital Compact. Retrieved 11 07, 2025, from https://au.int/sites/default/files/documents/44005-doc-EN_African_Digital_Compact_-_July_2024.pdf
Akamo, J. O. (2022). The Malabo Convention and Africa’s Cyber Posture. Retrieved 11 22, 2025, from https://ipss-addis.org/wp-content/uploads/2022/11/Policy-Brief-Jesutimilehin-O.-Akamo-.pdf
ALT Advisory. (2022). The Malabo Roadmap: Approaches to promote data protection and data governance in Africa. Retrieved 11 25, 2025, from https://dataprotection.africa/wp-content/uploads/malabo_roadmap_Sept_2022.pdf
Ayalew, Y. E. (2023). The African Union’s Malabo Convention on Cyber Security and Personal Data Protection enters into force nearly after a decade. What does it mean for Data Privacy in Africa or beyond? Retrieved 10 27, 2025, from https://www.ejiltalk.org/the-african-unions-malabo-convention-on-cyber-security-and-personal-data-protection-enters-into-force-nearly-after-a-decade-what-does-it-mean-for-data-privacy-in-africa-or-beyond/
Bouke M A, A. S. (2023). African Digital Transformation and Cybersecurity: A Critical Analysis of the Malabo Convention. Retrieved 11 20, 2025, from https://arxiv.org/pdf/2307.01966
Dartnall, R. P. (2022). Cyber Threats to the Financial Sector in Africa: An Assessment of the Current Threat and an Analysis of Emerging Trends on the Future Threat Landscape. Retrieved 10 25, 2025, from https://documents.worldbank.org/en/publication/documents-reports/documentdetail/099830405172214598
Dér, A. (2025). Aspects of Cyber Defence in Africa. Journal of Central and Eastern European African Studies, 5(1). doi:https://doi.org/10.12700/jceeas.2025.5.1.341
DiploFoundation. (2022). Cybersecurity and cybercrime in Africa: Continental and regional policies. Retrieved 11 03, 2025, from https://www.diplomacy.edu/resource/report-stronger-digital-voices-from-africa/cybersecurity-cybercrime-africa/cybersecurity-cybercrime-africa-continental-regio
ENISA. (2025). ENISA Threat Landscape 2025. doi:DOI:102824/1946374
European Commission. (2019). New Africa-Europe Digital Economy Partnership - report of the EU-AU Digital Economy Task Force. Retrieved 10 29, 2025, from https://digital-strategy.ec.europa.eu/en/library/new-africa-europe-digital-economy-partnership-report-eu-au-digital-economy-task-force
European Commission. (2024). EU and Africa strengthen cooperation on digital transformation. Retrieved 11 03, 2024, from https://digital-strategy.ec.europa.eu/en/news/eu-and-africa-strengthen-cooperation-digital-transformation
European Commission. (2024). Global Gateway: EU and Smart Africa strengthen partnership for Africa’s digital transformation. Retrieved 11 05, 2025, from https://international-partnerships.ec.europa.eu/news-and-events/news/global-gateway-eu-and-smart-africa-strengthen-partnership-africas-digital-transformation-2024-12-03_en
European Union. (2022). DIRECTIVE (EU) 2022/2555 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972 (...).
Forum of Incident Response and Security Teams. (n.d.). FIRST global CSIRT directory. Retrieved 11 20, 2025, from https://www.first.org
GC3B. (2023). The Accra Call for Cyber Resilient Development. Retrieved 10 20, 2025, from https://gc3b.org/the-accra-call-for-cyber-resilient-development/
GC3B. (2025). From Accra to Geneva: Notes from a Travel Journal. Retrieved 11 18, 2025, from https://gc3b.org/wp-content/uploads/2025/09/Accra-Call-Process-Report_Notes-from-a-Travel-Journal-2025.docx-Final.pdf
GFCE. (2023). Africa Agenda on Cyber Capacity Building (AA-CCB). Retrieved 10 12, 2025, from https://gc3b.org/wp-content/uploads/2023/12/Africa-Agenda-Final-Final_Dec-.pdf
Gulyás, A. (2025). Cybercrime and dark web in Africa, 2025. doi:https://doi.org/10.12700/jceeas.2024.4.3-4.278
Ifeanyi-Ajufo, N. (2023). Cyber governance in Africa: at the crossroads of politics, sovereignty and cooperation. doi:DOI:10.1080/25741292.2023.2199960
Intelpoint. (2024). Africa's cybersecurity score grew from 21 in 2017 to 57 in 2024, a 171% increase. Retrieved 10 25, 2025, from https://intelpoint.co/insights/africas-cybersecurity-score-grew-from-21-in-2017-to-57-in-2024-a-171-increase/
International Telecommunication Union. (2024). Global Cybersecurity Index 2024. Retrieved 11 19, 2025, from https://www.itu.int/epublications/publication/global-cybersecurity-index-2024
Internet Society. (2017). Internet Infrastructure Security Guidelines for Africa. Retrieved 10 27, 2025, from https://www.internetsociety.org/wp-content/uploads/2017/08/AfricanInternetInfrastructureSecurityGuidelines_May2017.pdf
Internet Society. (2025). Africa’s Internet Resilience Shows Promising Growth, New Internet Society Data Reveals Ahead of Key Conference. Retrieved 11 17, 2025, from https://www.internetsociety.org/news/press-releases/2025/africas-internet-resilience-shows-promising-growth-new-internet-society-data-reveals-ahead-of-key-conference/
INTERPOL. (2024). African Cyberthreat Assessment Report 2024. Retrieved 11 13, 2025, from https://www.interpol.int/content/download/21048/file/24COM005030-AJFOC_Africa%20Cyberthreat%20Assessment%20Report_2024_complet_EN%20v4.pdf
INTERPOL. (2025). New INTERPOL report warns of sharp rise in cybercrime in Africa 2025. Retrieved 10 29, 2025, from https://www.interpol.int/en/News-and-Events/News/2025/New-INTERPOL-report-warns-of-sharp-rise-in-cybercrime-in-Africa
ITU. (2021). Global Cybersecurity Index 2020. Retrieved 11 20, 2025, from https://www.itu.int/dms_pub/itu-d/opb/str/D-STR-GCI.01-2021-PDF-E.pdf
Kaaniru, J. (2023). The African Union Convention on Cyber Security and Personal Data Protection: Key Insights. Centre for Intellectual Property and Information Technology Law (CIPIT). Retrieved 10 25, 2025, from https://cipit.org/the-african-union-convention-on-cyber-security-and-personal-data-protection-key-insights/
Kamau, W. (2022). The Lome Declaration on Cybersecurity and Cybercrime in Africa. Retrieved 1029 2025, from https://www.talkafrica.co.ke/the-lome-declaration-on-cybersecurity-and-cybercrime-in-africa/
KPMG Advisory Services. (2022). Advancing cybersecurity with Africa: Study report. Retrieved 10 24, 2025, from https://thegfce.org/wp-content/uploads/2023/05/GFCE-Final-Report-Advancing-Cybersecurity-With-Africa.pdf
Orji, U. J. (2018). The African Union Convention on Cybersecurity: A regional response towards cyber stability? doi:doi.org/10.5817/MUJLT2018-2-1
Palo Alto. (2025). Unit 42. (2025). Global Incident Response Report. Link: https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report. Retrieved 11 05, 2025, from https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report
Peace and Security Council. (2023). Communiqué PSC/PR/COMM.1171 (2023). Retrieved 11 08, 2025, from https://www.peaceau.org/uploads/1171.comm-en.pdf
Resecurity. (2025). Resecurity and AfricaCERT Forge Strategic Partnership to Advance Cybersecurity Across the African Continent. Retrieved 11 08, 2025, from https://www.businesswire.com/news/home/20250811747007/en/Resecurity-and-AfricaCERT-Forge-Strategic-Partnership-to-Advance-Cybersecurity-Across-the-African-Continent
Smart Africa. (2025). Smart Africa adopts its constitution and 5-year strategy for the African Network of Cybersecurity Authorities (ANCA) to tackle cross-border cybersecurity challenges across the Continent. Retrieved 11 11, 2025, from https://smartafrica.org/smart-africa-adopts-its-constitution-and-5-year-strategy-for-the-african-network-of-cybersecurity-authorities-anca-to-tackle-cross-border-cybersecurity-challenges-across-the-continent/
Smart Africa. (n.d. a.). Who we are. Retrieved 10 30, 2025, from https://smartafrica.org/who-we-are/
Smart Africa. (n.d. b.). Smart Africa. Retrieved 11 02, 2025, from https://vc4a.com/smart-africa/
TechAfrica News. (2025). Smart Africa strengthens cybersecurity with ANCA’s five-year roadmap. Retrieved 11 05, 2025, from https://www.techafricanews.com/2025/02/05/smart-africa-strengthens-cybersecurity-with-ancas-five-year-roadmap
United Nations. (2022). Togo and UN sign MoU to establish the African Cybersecurity Centre. Retrieved 11 14, 2025, from https://africarenewal.un.org/en/magazine/togo-and-un-sign-mou-establish-african-cybersecurity-centre
United Nations Conference on Trade and Development. (n.d.). Data protection and privacy legislation worldwide. Retrieved 11 22, 2025, from https://unctad.org
Vörös Gy, Szulcsányi V. (2025). Cyber Threat Map of the Central Sahel Region, ISSN 2786-1902. Journal of Central and Eastern European African Studies. Vol. 5 No. 3. doi:DOI: https://doi.org/10.12700/jceeas.2025.5.3.416
World Bank. (2024a). Digital Transformation Drives Development in Africa. Retrieved 11 17, 2025, from https://www.worldbank.org/en/results/2024/01/18/digital-transformation-drives-development-in-afe-afw-africa
World Bank. (2024b). First responders: The role of computer security incident response teams (CSIRTs) in developing countries: Practitioner note. Retrieved 11 12, 2025, from https://documents1.worldbank.org/curated/en/099060824112023473/pdf/P177852-58c03308-bb90-41d5-a716-3967bd98edc4.pdf
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Károly Kassai
This work is licensed under a Creative Commons Attribution 4.0 International License.
