Where is the Cyber Security Summit South Africa being held?

The summit is scheduled to take place in Johannesburg, ZAF.

What is the primary focus of this event?

The event serves as a platform for cybersecurity professionals to address evolving digital threats and explore innovative solutions in the context of ZAF.

Cyber Security Summit South Africa – 38th Edition

Name: Cyber Security Summit South Africa – 38th Edition
Start: 2027-03-11T00:00:00Z
End: 2027-03-11T00:00:00Z
Location: Johannesburg

Mar 11, 2027Johannesburg, South AfricaIn-person

Registration open

The Cyber Security Summit South Africa, now in its thirty-eighth iteration, convenes in Johannesburg, South Africa. This event serves as a critical platform for cybersecurity professionals to address the evolving landscape of digital threats and explore innovative solutions. It brings together industry leaders, policymakers, and technical experts to foster collaboration and share insights on safeguarding digital infrastructure.

Committees & topics

Topics
Cybersecurity Governance · AI-Driven Security Operations · Cloud Security · Cyber Resilience · Critical Infrastructure Protection · Zero Trust Architecture · Identity and Access Management · POPIA Compliance

Why it matters

In an increasingly interconnected world, cybersecurity is not merely a technical concern but a fundamental aspect of national security, economic stability, and individual privacy. The summit's focus on the ZAF context is particularly significant, given the region's growing digital economy and the corresponding rise in cyber threats. Discussions at this event will likely shape regional strategies for threat detection, incident response, and resilience against sophisticated cyberattacks.

The gathering in Johannesburg provides a unique opportunity for stakeholders to engage directly with the challenges and opportunities specific to the African continent. It allows for the exchange of best practices and the development of localized solutions that are crucial for building robust cyber defenses. The insights shared here can influence policy decisions and investment in cybersecurity infrastructure across ZAF and potentially beyond.

How to prepare

Attendees should prepare by familiarizing themselves with the current cybersecurity landscape in ZAF, including recent threat reports and regulatory developments. Understanding the specific challenges faced by organizations and governments in the region will enable more productive engagement and networking. Reviewing lessons such as "what-is-stakeholder-mapping" can provide a foundation for understanding the various actors involved in cybersecurity governance and their interdependencies.

To maximize the benefits of participation, consider how your expertise or organizational goals align with the summit's themes. Prepare to articulate your perspectives on key cybersecurity issues and be ready to engage in discussions on collaborative strategies. Lessons on "hidden-stakeholders" can be particularly useful for identifying and understanding the less obvious but influential parties in the cybersecurity ecosystem, enhancing your ability to form impactful partnerships.

Country perspectives

Where the most-relevant 1 countries stand on the core issues in play. Click through for the full country profile.

South Africa

Actively seeking to enhance national cybersecurity capabilities and foster regional collaboration.

Role in topic

As the host nation, ZAF is at the forefront of discussions on cybersecurity in Africa. The country faces unique challenges related to digital transformation, infrastructure development, and the need to protect critical national assets from cyber threats. Its participation is crucial for setting regional agendas and implementing effective cybersecurity measures.

Topics & background

The background behind each topic and the actors that shape it.

Cybersecurity Governance

Cybersecurity governance refers to the policies, institutions, and accountability structures that determine how organizations and states manage cyber risk. At the international level, debate has accelerated since the conclusion of the UN Open-Ended Working Group (OEWG) on ICTs, which built on earlier GGE reports affirming that international law applies in cyberspace and articulating voluntary norms of responsible state behavior. In parallel, regional frameworks such as the EU's NIS2 Directive, the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention, in force since 2023), and national strategies have multiplied, creating a fragmented governance landscape. For South Africa, governance is shaped by the Cybercrimes Act of 2020, the Protection of Personal Information Act (POPIA), and the National Cybersecurity Policy Framework, coordinated through the State Security Agency and SITA. Yet capacity gaps, overlapping mandates between SAPS, the SANDF Cyber Command, and sectoral regulators, and limited public-private information sharing continue to hamper coherent national response. The core dispute today is how to reconcile sovereign control of cyberspace (favored by states such as China and Russia) with the multistakeholder, rights-respecting model promoted by Western democracies, while ensuring developing economies are not left as norm-takers.

Key players

AI-Driven Security Operations

The integration of artificial intelligence into security operations centers (SOCs) has moved from experimentation to mainstream adoption since 2022, accelerated by the public release of large language models and the rising volume of telemetry that human analysts cannot triage manually. AI is now used for anomaly detection, automated incident response, threat intelligence enrichment, and increasingly for autonomous remediation. At the same time, adversaries are using generative AI to scale phishing, develop polymorphic malware, and produce deepfake-enabled social engineering, creating an AI-versus-AI dynamic in the threat landscape. Policy frameworks are racing to catch up. The EU AI Act (2024) classifies certain security applications as high-risk; the US NIST AI Risk Management Framework and Executive Order 14110 set baseline expectations; and the UK-hosted AI Safety Summits at Bletchley (2023) and Seoul (2024) produced commitments on frontier model evaluation. The core dispute concerns accountability for AI-driven decisions, the opacity of vendor models, data sovereignty when telemetry is processed offshore, and how smaller economies — including South Africa — can adopt these capabilities without deepening dependence on a handful of hyperscale providers.

Key players

Cloud Security

Cloud adoption has reshaped the cybersecurity perimeter. With workloads distributed across AWS, Microsoft Azure, Google Cloud, and regional providers, the shared-responsibility model places infrastructure security on the provider but configuration, identity, and data protection on the customer — a division frequently misunderstood. High-profile incidents, from the 2019 Capital One breach to the 2023 Microsoft Storm-0558 token-forging compromise and the 2024 Snowflake customer credential attacks, have demonstrated that misconfiguration and identity weaknesses, rather than provider failure, drive most cloud breaches. The regulatory environment is tightening. The EU's Cyber Resilience Act, NIS2, and DORA impose stringent obligations on cloud and managed service providers; the US FedRAMP and CMMC schemes condition government procurement on certified controls; and several jurisdictions are debating data localization. In South Africa, hyperscalers have opened local regions (Cape Town, Johannesburg) partly in response to POPIA and sectoral guidance from the Reserve Bank and the Information Regulator. The central dispute is balancing the efficiency and resilience benefits of global cloud platforms against concerns over sovereignty, lawful access by foreign governments (notably under the US CLOUD Act), and concentration risk in a small number of providers.

Key players

Cyber Resilience

Cyber resilience shifts the emphasis from prevention alone to the ability to anticipate, withstand, recover from, and adapt to cyber incidents. The concept has gained prominence after a string of disruptive attacks — NotPetya (2017), Colonial Pipeline (2021), the Transnet ransomware incident in South Africa (2021), MOVEit (2023), and the CrowdStrike-induced global outage of 2024 — which showed that even well-defended organizations will be compromised and that recovery capability is the decisive variable. Legislatively, the EU Cyber Resilience Act (entered into force 2024) imposes security-by-design requirements on products with digital elements, while DORA mandates operational resilience testing across the financial sector. The US has aligned through CISA's Cyber Performance Goals and SEC incident-disclosure rules. The contemporary debate concerns how to measure resilience meaningfully, how to share incident data without exposing victims to liability, and how to ensure supply-chain and third-party dependencies — increasingly the weakest link — are governed across borders.

Key players

Critical Infrastructure Protection

Critical infrastructure — energy, water, telecommunications, finance, transport, and health — has become a primary target for both state-sponsored and criminal actors. The 2015 and 2016 attacks on Ukraine's power grid, the 2021 Colonial Pipeline ransomware incident, sustained intrusions attributed to the Volt Typhoon campaign against US infrastructure, and persistent attacks on European water utilities have shifted CIP from a technical concern to a national-security priority. The convergence of IT and operational technology (OT), combined with aging industrial control systems, has expanded the attack surface significantly. In South Africa, the National Critical Infrastructure Protection Act (2019) replaced apartheid-era legislation and designates protected installations, while Eskom, Transnet, and municipal water utilities have all faced serious cyber incidents. Internationally, the UN OEWG has affirmed that critical infrastructure should be off-limits in peacetime, but enforcement is weak and attribution remains contested. The core dispute is how to translate non-binding norms into deterrence, how to mandate minimum standards for private operators of essential services, and how to secure cross-border infrastructure such as undersea cables and regional power pools.

Key players

Zero Trust Architecture

Zero Trust is a security model premised on the assumption that no user, device, or network segment should be implicitly trusted. The concept, articulated by Forrester analyst John Kindervag in 2010 and codified in NIST Special Publication 800-207 (2020), gained policy weight when US Executive Order 14028 (2021) directed federal agencies to adopt Zero Trust architectures, followed by CISA's Zero Trust Maturity Model and DoD's reference architecture. Major breaches involving lateral movement after initial perimeter compromise — SolarWinds, Microsoft Exchange, and numerous ransomware cases — reinforced the model's appeal. Adoption is uneven. Large enterprises and governments in the US, UK, Singapore, and Australia are well into multi-year programs, while many organizations in emerging markets, including across Africa, face cost, skills, and legacy-system barriers. The debate today is less about whether to adopt Zero Trust than about how to operationalize it across hybrid environments, how to avoid vendor lock-in given proprietary implementations, and whether Zero Trust principles can be meaningfully extended to operational technology and supply chains.

Key players

Identity and Access Management

Identity has become the new perimeter. Compromised credentials and session tokens account for the majority of breaches according to successive Verizon DBIR reports, and incidents such as the Okta support-system breach (2023), the MGM and Caesars social-engineering attacks (2023), and the Microsoft Midnight Blizzard intrusion (2024) have demonstrated how identity-system weaknesses cascade into systemic compromise. The shift to cloud, remote work, and machine identities (workloads, APIs, AI agents) has expanded IAM far beyond traditional employee directories. Standards and regulation are evolving in parallel. FIDO2 and passkeys are gaining mainstream adoption, the EU's eIDAS 2.0 framework introduces a European Digital Identity Wallet, and India's Aadhaar and similar national ID programs raise both inclusion and surveillance questions. In South Africa, the Department of Home Affairs is advancing a National Identification System and a digital ID program, while POPIA imposes obligations on how identity data is processed. The core debates concern phishing-resistant authentication mandates, the governance of non-human and AI-agent identities, and how to design national digital identity systems that are inclusive, privacy-preserving, and resistant to state overreach.

Key players

POPIA Compliance

The Protection of Personal Information Act (POPIA), South Africa's flagship data-protection statute, was signed in 2013 but only came into full force on 1 July 2021, with the Information Regulator gaining enforcement powers from 1 July 2021 and full operational independence shortly thereafter. POPIA aligns broadly with the EU GDPR — establishing lawful processing conditions, data-subject rights, breach-notification obligations, and cross-border transfer restrictions — but is calibrated to South African constitutional jurisprudence on privacy under Section 14 of the Bill of Rights. Enforcement has accelerated since 2022, with the Information Regulator issuing its first enforcement notices and administrative fines, notably against the Department of Justice following a 2021 ransomware incident, and investigating major breaches at TransUnion, Experian, and credit bureaus. The current compliance landscape is shaped by tension between business cost of compliance, sectoral overlap with the Financial Sector Conduct Authority and Reserve Bank, and cross-border data flows to cloud providers headquartered outside South Africa. The central debate concerns how to operationalize POPIA in an AI and cloud era, how to harmonize with the African Union's Malabo Convention and continental free-trade data flows under AfCFTA, and how to resource the Information Regulator adequately.

Key players

Resources

News, lessons, and country profiles to prep for Cyber Security Summit South Africa – 38th Edition.

Recent reporting to ground your prep

Bhagwant Mann Launches Punjab Campaign Summit

Arming an archipelago: Is time running out for Europe's oldest DMZ? | Euronews

Comprehensive approach to security: Federal Council launches consultation on Switzerland's security policy strategy

Europe's June Heatwave: Infrastructure Crisis

Lessons

Bite-sized lessons to build the basics

Dynamic Analysis

Hidden Stakeholders

Engagement Strategies

Stakeholder Mapping Workshop

Courses

Guided courses that go deeper on the topic

Crisis Management

Advanced Negotiation

Multilateral Negotiation

Policy Brief Writing

The states in play, with the data that shapes their stance

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

South Africa March 2027

By committee

Frequently asked questions

Cyber Security Summit South Africa – 38th Edition

Mar 11, 2027Johannesburg, South AfricaIn-person

Registration open

Committees & topics

Topics
Cybersecurity Governance · AI-Driven Security Operations · Cloud Security · Cyber Resilience · Critical Infrastructure Protection · Zero Trust Architecture · Identity and Access Management · POPIA Compliance

Why it matters

How to prepare

Country perspectives

Where the most-relevant 1 countries stand on the core issues in play. Click through for the full country profile.

South Africa

Actively seeking to enhance national cybersecurity capabilities and foster regional collaboration.

Role in topic

Topics & background

The background behind each topic and the actors that shape it.

Cybersecurity Governance

Key players

AI-Driven Security Operations

Key players

Cloud Security

Key players

Cyber Resilience

Key players

Critical Infrastructure Protection

Key players

Zero Trust Architecture

Key players

Identity and Access Management

Key players

POPIA Compliance

Key players

Resources

News, lessons, and country profiles to prep for Cyber Security Summit South Africa – 38th Edition.

Recent reporting to ground your prep

Bhagwant Mann Launches Punjab Campaign Summit

Arming an archipelago: Is time running out for Europe's oldest DMZ? | Euronews

Comprehensive approach to security: Federal Council launches consultation on Switzerland's security policy strategy

Europe's June Heatwave: Infrastructure Crisis

Lessons

Bite-sized lessons to build the basics

Dynamic Analysis

Hidden Stakeholders

Engagement Strategies

Stakeholder Mapping Workshop

Courses

Guided courses that go deeper on the topic

Crisis Management

Advanced Negotiation

Multilateral Negotiation

Policy Brief Writing

The states in play, with the data that shapes their stance

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

South Africa March 2027

By committee

Committees & topics

Why it matters

How to prepare

Country perspectives

Topics & background

Resources

Related conferences

South Africa’s G20 Presidency: Lessons Learned

CYSEC THAILAND 2026 – Thailand Cyber Shield: Advancing the Nation's Digital Security

International Conference on Public Administration and Development Alternatives (IPADA) 2026

Africa Aerospace and Defence (AAD) 2026 Conference

63rd AEASA Conference 2026

THREAT 2026

Frequently asked questions

Committees & topics

Why it matters

How to prepare

Country perspectives

Topics & background

Resources

Related conferences

South Africa’s G20 Presidency: Lessons Learned

CYSEC THAILAND 2026 – Thailand Cyber Shield: Advancing the Nation's Digital Security

International Conference on Public Administration and Development Alternatives (IPADA) 2026

Africa Aerospace and Defence (AAD) 2026 Conference

63rd AEASA Conference 2026

THREAT 2026

Frequently asked questions