The KnowBe4 Africa Human Risk Management Report 2025, which gathered responses from 124 senior cybersecurity leaders across 30 African countries, reveals a dangerous disconnect between perception and reality. 

Leaders often say their workforce understands cyber risks, scoring awareness at an average of four out of five, yet the systems needed to translate that awareness into effective action remain weak.

One of the starkest findings is around training. Although 68% of decision-makers insist security awareness training is tailored to job roles, the second most-cited challenge in the report is the lack of role-based alignment. 

In practice, many employees are still receiving generic, one-size-fits-all programmes, often delivered annually or biannually. Manufacturing and healthcare organisations were singled out, with 50% and 40% respectively admitting no role-specific tailoring at all.

Phishing simulations, widely recognised as a critical tool, are also underutilised. While 90% of organisations conduct them, only 7% do so monthly, and the largest share (40%) runs them just twice a year. 

The report warns that this “low frequency poses a critical challenge” because rare exposure makes it harder for employees to develop instinctive responses to real threats.

Technology adoption is another fault line. Between 41% and 80% of employees across the continent use personal devices for work, yet many of these devices lack proper security controls. 

This Bring Your Own Device (BYOD) trend, particularly high in North Africa where 61%–80% of workers use personal phones or laptops for office tasks, remains largely unmanaged. 

Compounding this is the rising risk of “shadow AI”. Nearly half of organisations (46%) admitted their AI governance policies are still “in development”, leaving staff free to use AI tools in potentially unsafe ways.

The report also reveals sharp regional contrasts. Southern Africa leads in training frequency, with 44% of organisations conducting sessions quarterly. East Africa is ahead in AI governance, with 50% of organisations already having formal policies in place. 

In contrast, West and Central Africa report the highest number of human-related security incidents, while North Africa combines the highest BYOD exposure with the lowest training frequency.

Anna Collard, SVP of content strategy & evangelist at KnowBe4 Africa, summed up the problem bluntly: “There’s a disconnect here – between what leaders think is happening, and what employees are actually experiencing. The data shows that without procedural and cultural follow-through, awareness simply doesn’t translate into readiness.”

For businesses, awareness alone is no longer enough, especially when it comes to the huge cybersecurity divide in Africa. The report calls for customised, role-based training, stronger incident reporting systems, clear AI governance, and region-specific strategies. Without these, Africa’s growing confidence in its cyber defences risks masking dangerous blind spots.

The event focused on how Africa can leverage AI to strengthen its digital infrastructure and address the region’s growing cybersecurity challenges.

Yellow Card was fully engaged in the discussions and networking with stakeholders, highlighting their Payments API and how it can help companies seamlessly integrate stablecoin payments for cross-border transactions across Africa.

Cybersecurity, AI, and Africa’s Digital Future

A standout moment at the conference was the panel discussion on “Harmonizing African Cybersecurity Policies and its Impact on Digital Transformation.”

George Kisaka, Information Security Governance, Risk and Compliance Specialist at Yellow Card joined to speak about the urgent need for African nations to strengthen their cybersecurity laws. He stressed that to keep pace with global standards, African governments must build robust frameworks to protect their citizens and businesses from cyber threats.

He argued that, just as Western countries have robust laws to protect their citizens, African governments must implement similarly strong cybersecurity laws to safeguard their citizens’ digital experiences. He also called for unity across the continent, stressing that harmonized cybersecurity policies are essential for protecting both businesses and individuals.

The conversation also delved into the role of AI in Africa’s digital transformation. While some attendees expressed concerns about AI replacing jobs, the speakers reassured the audience that AI should be viewed as a tool to enhance human potential, not replace it.

They encouraged Africans to embrace AI, upskill, and see it as an opportunity for collaboration, rather than competition.

Cybercrime and Building Collaboration

Another key discussion surrounded the rise of internet fraud among young people in Nigeria. Several attendees raised concerns about how easily young Nigerians can fall into fraudulent activities due to limited job opportunities and lack of awareness.

The panel addressed these concerns, emphasizing the role of government and regulatory bodies in curbing internet fraud.

They discussed the importance of education, regulation, and the implementation of strict penalties for cybercriminals, highlighting that a collective effort from both public and private sectors is needed to protect the next generation.

The speakers also highlighted international conferences, such as the European Cybersecurity Forum (CYBERSEC) and the RSA Conference, as vital spaces for global cybersecurity discussions.

These events allow leaders from all over the world to share best practices and solutions, something Africa must actively engage with as it builds its own cybersecurity framework.

Africa’s Digital Evolution

As one of the fastest growing fintech’s in Africa and the largest stablecoins on/off ramp on the continent, Yellow Card is committed to Africa’s digital transformation.

Stablecoins to Revolutionize African Finance with Yellow Card Enabling Easy Adoption – Jason Marshall, Yellow Card COO

Beyond offering secure and efficient financial solutions, the company is passionate about educating and connecting businesses across Africa to the tools they need to thrive in a digital-first economy.

Their presence at the event showcased their belief in the power of collaboration, technology, and strong cybersecurity policies to drive sustainable growth across the continent.

Looking Ahead…

As Africa continues to embrace digital transformation, strengthening cybersecurity and integrating technologies like AI will be key to building a secure, inclusive digital economy.