30 Apr Africa’s cybersecurity market gains momentum as digital risks grow

Africa’s cybersecurity market is entering a phase of significant growth, but there’s a darker side on the horizon.

This growth, driven by digitalisation across industries, has increased exposure to cyber threats targeting critical infrastructure.

According to new insights from Markets and Markets, as well as words by Schneider Electric, the market is expected to expand in big ways over the next decade.

“Africa’s cybersecurity market is projected to grow from about USD $0.68 billion in 2025 to USD $1.44 billion by 2031, reflecting rising demand for the protection of critical infrastructure amid rapid digitalisation across key sectors,” Schneider Electric told Dark Reading this month.

A separate report by MarketsandMarkets projects that the wider Middle East and Africa cybersecurity market will grow from USD $25.02 billion in 2025 to USD $39.98 billion by 2030, as organisations respond to a more complex threat environment and rising attack volumes.

Country Sales Director, Process Automation and Software, Schneider Electric Anglophone Africa, Elijah Daniel, said the pace of digital adoption is also changing the role of cybersecurity, explaining: “As digital adoption accelerates across Sub-Saharan Africa, cybersecurity is no longer just a back-office IT function; it has become critical economic infrastructure essential to both industrial continuity and regional economic stability.”

The warning comes as industries such as oil and gas, mining, and power generation face growing exposure to cyberattacks.

Schneider Electric noted that many of these sectors still rely on legacy systems, including Distributed Control Systems (DCS) and Safety Instrumented Systems (SIS), which often lack modern security protections.

According to the company, these outdated systems are increasingly being targeted by ransomware attacks, supply chain breaches, and other sophisticated cyber threats.

It also highlighted structural vulnerabilities, particularly the lack of separation between IT and operational technology (OT) networks.

This, it said, creates multiple entry points into critical systems through compromised emails, malicious files, or infected external devices.

Operational practices are compounding the risks. Schneider Electric pointed to the continued use of ‘run to failure’ maintenance models, which extend system lifecycles but often leave infrastructure without necessary updates or vendor support.

Weak governance frameworks, including poor access management and limited cybersecurity oversight, further heighten exposure.

To address these challenges, the company urged organisations to strengthen their cybersecurity posture by adopting higher protection standards, including moving from Security Level 2 to Security Level 3, to withstand more complex and coordinated attacks.