Last week, the National Interfaith Youth Summit on Preventing and Countering Violent Extremism (PCVE) gathered in Nairobi under the theme “Building Resilient Communities Against Violent Extremism.”
Delegates ranged from youth and religious leaders to development partners and government officials.
They left with five recommendations: economic empowerment, governance reforms, social inclusion, and rehabilitation of extremist returnees.
But one resolution struck a deeper nerve: digital peacebuilding and cybersecurity.
From Catholic Bishop Willybard Lagho’s warning about the ethical foundations of AI to youth activists calling for safer online spaces, the consensus was clear.
The next frontier of extremism, disinformation, and fraud will not be on battlefields—it will be in cyberspace.
“We cannot close our eyes to the ethical foundations of AI. The next battle for our societies will be fought online,” Bishop Lagho cautioned.
Africa’s digital revolution has been breathtaking. Mobile money, e-commerce, e-health, and e-governance touch hundreds of millions daily.
Yet, this progress has come with fragile guardrails. Cybercrime costs Africa an estimated $4 billion annually, according to the AU’s 2024 Cybersecurity Outlook.
In the absence of coordinated defenses, citizens and businesses are exposed to threats that cross borders effortlessly.
In Kenya, financial institutions battle relentless mobile money fraud. In Nigeria, government websites have been hijacked in politically motivated cyberattacks.
In South Africa, the 2022 breach of TransUnion exposed the personal data of 54 million people, nearly the entire population.
“Cybercriminals do not recognize borders, but Africa’s defenses are still locked within them,” says Allan Wanzala, expert at the Kenya’s National Counter Terrorism, Council a certification
Meanwhile, Europe has moved in the opposite direction. Its NIS 2 Directive, effective since 2023, enforces mandatory cybersecurity measures across the EU.
It requires 24-hour breach reporting, executive accountability, and fines of up to €10 million for negligence.
More importantly, it recognizes that weak links in one country endanger the entire bloc.
Peter Geelen, a Belgian cyber security trainer, explains:
“NIS 2 forces a culture shift—from voluntary compliance to systemic resilience. No country can go it alone.”
Africa’s patchwork approach—where only a handful of countries like Kenya, Mauritius, Rwanda, and South Africa have comprehensive cybersecurity laws—creates dangerous blind spots.
Africa is not starting from scratch, in 2014, the Malabo Convention on Cybersecurity and Personal Data Protection laid out a foundation.
But as of 2025, fewer than 20 AU member states have ratified thus leaving most of the continent without binding standards.
An AU official from the Department of Infrastructure and Energy admits:
“The Malabo Convention gave us a strong starting point, but we need harmonization, enforcement, and collective ownership. Cybersecurity must be a continental priority, not an optional extra.”
Borrowing from Europe, experts now call for an African Cybersecurity Directive that could define critical infrastructure sectors continent-wide.
The directive could also harmonize incident reporting standards across borders and establish regional security operations centers (SOCs) for shared intelligence.
It will also provide a better framework for imposing penalties for negligence by organizations handling sensitive data.
Further it would introduce a “CyberFundamentals” framework to help small and medium-sized businesses,80% of Africa’s economy,measure and improve resilience.
Such a framework would not only protect citizens but also fuel economic integration under the African Continental Free Trade Area (AfCFTA).
AfCFTA envisions a trillion-dollar digital economy by 2035. But without digital trust, cross-border trade will falter.
“AfCFTA cannot thrive on paper alone,” says a digital trade adviser at the AfCFTA Secretariat in Accra.
“If a Ghanaian buyer cannot trust a Tanzanian e-commerce platform with her data, trade will stall. A common cybersecurity baseline is essential.”
The Smart Africa Alliance, comprising 36 member states, has already harmonized frameworks for digital IDs and cross-border data. Its CEO, Lacina Koné, believes cybersecurity is the natural next step.
“Digital trust is now the currency of integration. We cannot build smart cities or digital economies on shaky foundations. The EU’s example proves harmonization works. Africa must adapt this model to our context.”
The urgency is not theoretical,in August 2024, Kenyan detectives arrested 26-year-old Seth Mwabe, a Meru University dropout, for allegedly siphoning over USD$ 85,000 from a betting firm through a sophisticated cyber fraud scheme.
Mwabe had posed as a cybersecurity consultant while running a shadow operation from his Kiambu apartment.
Police recovered a safe, a money-counting machine, and a computer lab designed for hacking.
The case is emblematic of how young Africans, locked out of formal opportunities, can easily pivot into cybercrime. Without regional cooperation, such actors operate freely across borders.
The urgency for Africa aligns with a shifting global security landscape.
From Ukraine to the Middle East, AI-driven disinformation, ransomware, and drone warfare highlight how cyberspace is reshaping conflict.
At the Munich Security Conference 2025, policymakers agreed: technology is now inseparable from national defense.
Countries from Japan to Canada are embedding transparency, sovereignty, and ethics into AI and cybersecurity laws.
Yet Africa risks falling behind, its frameworks fragmented, its defenses underfunded, and its integration vulnerable.
Experts now propose three concrete pathways for ECOWAS, SADC, and COMESA to pilot directives tailored to critical sectors (finance, health, security, energy) and later harmonize under AU leadership.
Drawing from Mauritius’ model, governments should engage telcos, banks, and tech startups as co-defenders of digital ecosystems.
Europe’s ENISA is already training African regulators. Expanding such partnerships, with funding from multilateral lenders, could accelerate readiness.
Kenya’s Computer Misuse and Cybercrimes Act (2018), despite criticisms, offers a starting point.
With amendments ensuring free speech and child safety online, it could serve as a regional model.
Due to the stark stakes, a single large-scale cyberattack on an African central bank or election platform could erode public trust overnight.
Unlike ransomware shocks in Europe, Africa may lack the buffers to recover quickly.
“Cybersecurity is not a luxury; it is infrastructure,” stresses Kanyiri Muriithi (NCTC Chief Liaison Officer ) “Just as roads and power grids enable economies, secure digital systems will enable AfCFTA. Without them, integration will stall.”
Borrowing a leaf from Europe’s playbook, Africa can transform fragmented defenses into a continental cyber shield, securing its growth, protecting its people, and signaling to investors that it takes digital trust seriously.
Because the next battle for Africa’s prosperity won’t be fought with guns, it will be fought with algorithms. And the sooner Africa unites its defenses, the safer its future will be.
Discover the stories shaping our future with Impact News on Impact Newswire — your trusted source for the latest in business, technology, and global innovation that inspires change.”
Discover more from Impact Newswire
Subscribe to get the latest posts sent to your email.
