--- title: "Cyber Security Summit South Africa 2027 — Johannesburg" description: "Cyber Security Summit South Africa – 38th Edition is a professional conference in Johannesburg, South Africa, Mar 11, 2027." url: "https://modeldiplomat.com/conferences/professional/cyber-security-summit-south-africa-38th-edition-2027" --- # Cyber Security Summit South Africa – 38th Edition Mar 11, 2027[Johannesburg, South Africa](https://www.google.com/maps/search/?api=1\&query=Johannesburg%2C%20South%20Africa)In-person [Registration open](https://exito-e.com/cybersecuritysummit/south-africa/) The Cyber Security Summit South Africa, now in its thirty-eighth iteration, convenes in Johannesburg, South Africa. This event serves as a critical platform for cybersecurity professionals to address the evolving landscape of digital threats and explore innovative solutions. It brings together industry leaders, policymakers, and technical experts to foster collaboration and share insights on safeguarding digital infrastructure. ## Committees & topics - Topics Cybersecurity Governance · AI-Driven Security Operations · Cloud Security · Cyber Resilience · Critical Infrastructure Protection · Zero Trust Architecture · Identity and Access Management · POPIA Compliance ## Why it matters In an increasingly interconnected world, cybersecurity is not merely a technical concern but a fundamental aspect of national security, economic stability, and individual privacy. The summit's focus on the ZAF context is particularly significant, given the region's growing digital economy and the corresponding rise in cyber threats. Discussions at this event will likely shape regional strategies for threat detection, incident response, and resilience against sophisticated cyberattacks. The gathering in Johannesburg provides a unique opportunity for stakeholders to engage directly with the challenges and opportunities specific to the African continent. It allows for the exchange of best practices and the development of localized solutions that are crucial for building robust cyber defenses. The insights shared here can influence policy decisions and investment in cybersecurity infrastructure across ZAF and potentially beyond. ## How to prepare Attendees should prepare by familiarizing themselves with the current cybersecurity landscape in ZAF, including recent threat reports and regulatory developments. Understanding the specific challenges faced by organizations and governments in the region will enable more productive engagement and networking. Reviewing lessons such as "what-is-stakeholder-mapping" can provide a foundation for understanding the various actors involved in cybersecurity governance and their interdependencies. To maximize the benefits of participation, consider how your expertise or organizational goals align with the summit's themes. Prepare to articulate your perspectives on key cybersecurity issues and be ready to engage in discussions on collaborative strategies. Lessons on "hidden-stakeholders" can be particularly useful for identifying and understanding the less obvious but influential parties in the cybersecurity ecosystem, enhancing your ability to form impactful partnerships. ## Country perspectives Where the most-relevant 1 countries stand on the core issues in play. Click through for the full country profile. [South Africa](https://modeldiplomat.com/country/south-africa) [Actively seeking to enhance national cybersecurity capabilities and foster regional collaboration.](https://modeldiplomat.com/country/south-africa) [Role in topic](https://modeldiplomat.com/country/south-africa) [As the host nation, ZAF is at the forefront of discussions on cybersecurity in Africa. The country faces unique challenges related to digital transformation, infrastructure development, and the need to protect critical national assets from cyber threats. Its participation is crucial for setting regional agendas and implementing effective cybersecurity measures.](https://modeldiplomat.com/country/south-africa) ## Topics & background The background behind each topic and the actors that shape it. 1 ### Cybersecurity Governance Cybersecurity governance refers to the policies, institutions, and accountability structures that determine how organizations and states manage cyber risk. At the international level, debate has accelerated since the conclusion of the UN Open-Ended Working Group (OEWG) on ICTs, which built on earlier GGE reports affirming that international law applies in cyberspace and articulating voluntary norms of responsible state behavior. In parallel, regional frameworks such as the EU's NIS2 Directive, the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention, in force since 2023), and national strategies have multiplied, creating a fragmented governance landscape. For South Africa, governance is shaped by the Cybercrimes Act of 2020, the Protection of Personal Information Act (POPIA), and the National Cybersecurity Policy Framework, coordinated through the State Security Agency and SITA. Yet capacity gaps, overlapping mandates between SAPS, the SANDF Cyber Command, and sectoral regulators, and limited public-private information sharing continue to hamper coherent national response. The core dispute today is how to reconcile sovereign control of cyberspace (favored by states such as China and Russia) with the multistakeholder, rights-respecting model promoted by Western democracies, while ensuring developing economies are not left as norm-takers. Key players - [South Africa](https://modeldiplomat.com/country/south-africa) [Host state implementing the Cybercrimes Act and National Cybersecurity Policy Framework](https://modeldiplomat.com/country/south-africa) - [United States](https://modeldiplomat.com/country/united-states) [Leading proponent of the multistakeholder model and applicability of existing international law to cyberspace](https://modeldiplomat.com/country/united-states) - [China](https://modeldiplomat.com/country/china) [Advocates state-led cyber sovereignty and a new binding UN cybercrime convention](https://modeldiplomat.com/country/china) - [Russia](https://modeldiplomat.com/country/russia) [Co-sponsor of the UN Cybercrime Convention and proponent of state-centric ICT governance](https://modeldiplomat.com/country/russia) - [United Kingdom](https://modeldiplomat.com/country/united-kingdom) [Key driver of the OEWG outcomes and Commonwealth cyber capacity building](https://modeldiplomat.com/country/united-kingdom) - [Estonia](https://modeldiplomat.com/country/estonia) [Reference state for national cyber governance and host of NATO CCDCOE](https://modeldiplomat.com/country/estonia) 2 ### AI-Driven Security Operations The integration of artificial intelligence into security operations centers (SOCs) has moved from experimentation to mainstream adoption since 2022, accelerated by the public release of large language models and the rising volume of telemetry that human analysts cannot triage manually. AI is now used for anomaly detection, automated incident response, threat intelligence enrichment, and increasingly for autonomous remediation. At the same time, adversaries are using generative AI to scale phishing, develop polymorphic malware, and produce deepfake-enabled social engineering, creating an AI-versus-AI dynamic in the threat landscape. Policy frameworks are racing to catch up. The EU AI Act (2024) classifies certain security applications as high-risk; the US NIST AI Risk Management Framework and Executive Order 14110 set baseline expectations; and the UK-hosted AI Safety Summits at Bletchley (2023) and Seoul (2024) produced commitments on frontier model evaluation. The core dispute concerns accountability for AI-driven decisions, the opacity of vendor models, data sovereignty when telemetry is processed offshore, and how smaller economies — including South Africa — can adopt these capabilities without deepening dependence on a handful of hyperscale providers. Key players - [United States](https://modeldiplomat.com/country/united-states) [Home to dominant AI security vendors and issuer of the NIST AI RMF](https://modeldiplomat.com/country/united-states) - [China](https://modeldiplomat.com/country/china) [Major investor in AI-enabled defensive and offensive cyber capability](https://modeldiplomat.com/country/china) - [United Kingdom](https://modeldiplomat.com/country/united-kingdom) [Convenor of the AI Safety Summit process and AI Safety Institute](https://modeldiplomat.com/country/united-kingdom) - [Israel](https://modeldiplomat.com/country/israel) [Significant exporter of AI-driven cyber defense and offense tooling](https://modeldiplomat.com/country/israel) - [South Africa](https://modeldiplomat.com/country/south-africa) [Adopter market shaping AU-level AI and cyber policy positions](https://modeldiplomat.com/country/south-africa) 3 ### Cloud Security Cloud adoption has reshaped the cybersecurity perimeter. With workloads distributed across AWS, Microsoft Azure, Google Cloud, and regional providers, the shared-responsibility model places infrastructure security on the provider but configuration, identity, and data protection on the customer — a division frequently misunderstood. High-profile incidents, from the 2019 Capital One breach to the 2023 Microsoft Storm-0558 token-forging compromise and the 2024 Snowflake customer credential attacks, have demonstrated that misconfiguration and identity weaknesses, rather than provider failure, drive most cloud breaches. The regulatory environment is tightening. The EU's Cyber Resilience Act, NIS2, and DORA impose stringent obligations on cloud and managed service providers; the US FedRAMP and CMMC schemes condition government procurement on certified controls; and several jurisdictions are debating data localization. In South Africa, hyperscalers have opened local regions (Cape Town, Johannesburg) partly in response to POPIA and sectoral guidance from the Reserve Bank and the Information Regulator. The central dispute is balancing the efficiency and resilience benefits of global cloud platforms against concerns over sovereignty, lawful access by foreign governments (notably under the US CLOUD Act), and concentration risk in a small number of providers. Key players - [United States](https://modeldiplomat.com/country/united-states) [Home to the dominant hyperscale cloud providers and the CLOUD Act jurisdiction](https://modeldiplomat.com/country/united-states) - [Ireland](https://modeldiplomat.com/country/ireland) [EU base for major cloud providers and frontline data-protection regulator](https://modeldiplomat.com/country/ireland) - [Germany](https://modeldiplomat.com/country/germany) [Driver of EU cloud sovereignty initiatives such as Gaia-X](https://modeldiplomat.com/country/germany) - [China](https://modeldiplomat.com/country/china) [Operator of alternative cloud ecosystem (Alibaba, Tencent, Huawei Cloud)](https://modeldiplomat.com/country/china) - [South Africa](https://modeldiplomat.com/country/south-africa) [Regional cloud hub for sub-Saharan Africa with POPIA-driven localization](https://modeldiplomat.com/country/south-africa) 4 ### Cyber Resilience Cyber resilience shifts the emphasis from prevention alone to the ability to anticipate, withstand, recover from, and adapt to cyber incidents. The concept has gained prominence after a string of disruptive attacks — NotPetya (2017), Colonial Pipeline (2021), the Transnet ransomware incident in South Africa (2021), MOVEit (2023), and the CrowdStrike-induced global outage of 2024 — which showed that even well-defended organizations will be compromised and that recovery capability is the decisive variable. Legislatively, the EU Cyber Resilience Act (entered into force 2024) imposes security-by-design requirements on products with digital elements, while DORA mandates operational resilience testing across the financial sector. The US has aligned through CISA's Cyber Performance Goals and SEC incident-disclosure rules. The contemporary debate concerns how to measure resilience meaningfully, how to share incident data without exposing victims to liability, and how to ensure supply-chain and third-party dependencies — increasingly the weakest link — are governed across borders. Key players - [United States](https://modeldiplomat.com/country/united-states) [Sets resilience baselines through CISA and SEC disclosure rules](https://modeldiplomat.com/country/united-states) - [Germany](https://modeldiplomat.com/country/germany) [Leading EU voice on DORA and the Cyber Resilience Act implementation](https://modeldiplomat.com/country/germany) - [United Kingdom](https://modeldiplomat.com/country/united-kingdom) [Operates the NCSC and Cyber Essentials assurance scheme](https://modeldiplomat.com/country/united-kingdom) - [South Africa](https://modeldiplomat.com/country/south-africa) [Recovering from major incidents affecting Transnet, DPSA and Eskom-adjacent systems](https://modeldiplomat.com/country/south-africa) - [Singapore](https://modeldiplomat.com/country/singapore) [Operates the OT-CCE and a mature critical-sector resilience regime](https://modeldiplomat.com/country/singapore) 5 ### Critical Infrastructure Protection Critical infrastructure — energy, water, telecommunications, finance, transport, and health — has become a primary target for both state-sponsored and criminal actors. The 2015 and 2016 attacks on Ukraine's power grid, the 2021 Colonial Pipeline ransomware incident, sustained intrusions attributed to the Volt Typhoon campaign against US infrastructure, and persistent attacks on European water utilities have shifted CIP from a technical concern to a national-security priority. The convergence of IT and operational technology (OT), combined with aging industrial control systems, has expanded the attack surface significantly. In South Africa, the National Critical Infrastructure Protection Act (2019) replaced apartheid-era legislation and designates protected installations, while Eskom, Transnet, and municipal water utilities have all faced serious cyber incidents. Internationally, the UN OEWG has affirmed that critical infrastructure should be off-limits in peacetime, but enforcement is weak and attribution remains contested. The core dispute is how to translate non-binding norms into deterrence, how to mandate minimum standards for private operators of essential services, and how to secure cross-border infrastructure such as undersea cables and regional power pools. Key players - [United States](https://modeldiplomat.com/country/united-states) [Lead target and respondent to Volt Typhoon and similar OT-focused intrusions](https://modeldiplomat.com/country/united-states) - [Ukraine](https://modeldiplomat.com/country/ukraine) [Most active real-world laboratory for grid and infrastructure attacks](https://modeldiplomat.com/country/ukraine) - [Russia](https://modeldiplomat.com/country/russia) [Attributed actor in multiple infrastructure intrusion campaigns](https://modeldiplomat.com/country/russia) - [China](https://modeldiplomat.com/country/china) [Attributed actor in pre-positioning campaigns against critical networks](https://modeldiplomat.com/country/china) - [South Africa](https://modeldiplomat.com/country/south-africa) [Operator of regionally significant grid, ports and telecoms infrastructure under cyber pressure](https://modeldiplomat.com/country/south-africa) - [Israel](https://modeldiplomat.com/country/israel) [Frequently targeted in water and energy sector intrusions](https://modeldiplomat.com/country/israel) 6 ### Zero Trust Architecture Zero Trust is a security model premised on the assumption that no user, device, or network segment should be implicitly trusted. The concept, articulated by Forrester analyst John Kindervag in 2010 and codified in NIST Special Publication 800-207 (2020), gained policy weight when US Executive Order 14028 (2021) directed federal agencies to adopt Zero Trust architectures, followed by CISA's Zero Trust Maturity Model and DoD's reference architecture. Major breaches involving lateral movement after initial perimeter compromise — SolarWinds, Microsoft Exchange, and numerous ransomware cases — reinforced the model's appeal. Adoption is uneven. Large enterprises and governments in the US, UK, Singapore, and Australia are well into multi-year programs, while many organizations in emerging markets, including across Africa, face cost, skills, and legacy-system barriers. The debate today is less about whether to adopt Zero Trust than about how to operationalize it across hybrid environments, how to avoid vendor lock-in given proprietary implementations, and whether Zero Trust principles can be meaningfully extended to operational technology and supply chains. Key players - [United States](https://modeldiplomat.com/country/united-states) [Originator of the policy mandate via EO 14028 and NIST SP 800-207](https://modeldiplomat.com/country/united-states) - [United Kingdom](https://modeldiplomat.com/country/united-kingdom) [NCSC publisher of widely referenced Zero Trust design principles](https://modeldiplomat.com/country/united-kingdom) - [Singapore](https://modeldiplomat.com/country/singapore) [Government-wide adopter via the GovTech Zero Trust strategy](https://modeldiplomat.com/country/singapore) - [Australia](https://modeldiplomat.com/country/australia) [Implementer through the Essential Eight and federal Zero Trust roadmap](https://modeldiplomat.com/country/australia) - [South Africa](https://modeldiplomat.com/country/south-africa) [Adopting market in financial services and government modernization](https://modeldiplomat.com/country/south-africa) 7 ### Identity and Access Management Identity has become the new perimeter. Compromised credentials and session tokens account for the majority of breaches according to successive Verizon DBIR reports, and incidents such as the Okta support-system breach (2023), the MGM and Caesars social-engineering attacks (2023), and the Microsoft Midnight Blizzard intrusion (2024) have demonstrated how identity-system weaknesses cascade into systemic compromise. The shift to cloud, remote work, and machine identities (workloads, APIs, AI agents) has expanded IAM far beyond traditional employee directories. Standards and regulation are evolving in parallel. FIDO2 and passkeys are gaining mainstream adoption, the EU's eIDAS 2.0 framework introduces a European Digital Identity Wallet, and India's Aadhaar and similar national ID programs raise both inclusion and surveillance questions. In South Africa, the Department of Home Affairs is advancing a National Identification System and a digital ID program, while POPIA imposes obligations on how identity data is processed. The core debates concern phishing-resistant authentication mandates, the governance of non-human and AI-agent identities, and how to design national digital identity systems that are inclusive, privacy-preserving, and resistant to state overreach. Key players - [United States](https://modeldiplomat.com/country/united-states) [Home to dominant IAM vendors and CISA-led federal identity guidance](https://modeldiplomat.com/country/united-states) - [India](https://modeldiplomat.com/country/india) [Operator of Aadhaar, the world's largest biometric identity system](https://modeldiplomat.com/country/india) - [Estonia](https://modeldiplomat.com/country/estonia) [Reference model for national digital identity and e-residency](https://modeldiplomat.com/country/estonia) - [South Africa](https://modeldiplomat.com/country/south-africa) [Modernizing national identity and rolling out digital ID under POPIA](https://modeldiplomat.com/country/south-africa) - [Germany](https://modeldiplomat.com/country/germany) [Lead EU state shaping eIDAS 2.0 and the EU Digital Identity Wallet](https://modeldiplomat.com/country/germany) 8 ### POPIA Compliance The Protection of Personal Information Act (POPIA), South Africa's flagship data-protection statute, was signed in 2013 but only came into full force on 1 July 2021, with the Information Regulator gaining enforcement powers from 1 July 2021 and full operational independence shortly thereafter. POPIA aligns broadly with the EU GDPR — establishing lawful processing conditions, data-subject rights, breach-notification obligations, and cross-border transfer restrictions — but is calibrated to South African constitutional jurisprudence on privacy under Section 14 of the Bill of Rights. Enforcement has accelerated since 2022, with the Information Regulator issuing its first enforcement notices and administrative fines, notably against the Department of Justice following a 2021 ransomware incident, and investigating major breaches at TransUnion, Experian, and credit bureaus. The current compliance landscape is shaped by tension between business cost of compliance, sectoral overlap with the Financial Sector Conduct Authority and Reserve Bank, and cross-border data flows to cloud providers headquartered outside South Africa. The central debate concerns how to operationalize POPIA in an AI and cloud era, how to harmonize with the African Union's Malabo Convention and continental free-trade data flows under AfCFTA, and how to resource the Information Regulator adequately. Key players - [South Africa](https://modeldiplomat.com/country/south-africa) [Enacting jurisdiction with the Information Regulator as enforcement authority](https://modeldiplomat.com/country/south-africa) - [United States](https://modeldiplomat.com/country/united-states) [Home to major cloud and platform processors handling South African personal data](https://modeldiplomat.com/country/united-states) - [Ireland](https://modeldiplomat.com/country/ireland) [EU lead supervisory authority for many multinationals processing POPIA-covered data](https://modeldiplomat.com/country/ireland) - [United Kingdom](https://modeldiplomat.com/country/united-kingdom) [Adequacy reference jurisdiction and significant cross-border data partner](https://modeldiplomat.com/country/united-kingdom) - [Nigeria](https://modeldiplomat.com/country/nigeria) [Continental peer regulator under the NDPA shaping AU data-protection alignment](https://modeldiplomat.com/country/nigeria) ## Resources News, lessons, and country profiles to prep for Cyber Security Summit South Africa – 38th Edition. Recent reporting to ground your prep [Bhagwant Mann Launches Punjab Campaign Summit](https://modeldiplomat.com/story/bhagwant-mann-launches-punjab-campaign-summit) [Arming an archipelago: Is time running out for Europe's oldest DMZ? | Euronews](https://modeldiplomat.com/story/ala-arming-an-archipelago-is-time-running-out-for-europes-oldest-dmz-euronews) [Comprehensive approach to security: Federal Council launches consultation on Switzerland's security policy strategy](https://modeldiplomat.com/story/che-comprehensive-approach-to-security-federal-council-launches-consultation-on) [Europe's June Heatwave: Infrastructure Crisis](https://modeldiplomat.com/story/europes-june-heatwave-infrastructure-crisis) Lessons Bite-sized lessons to build the basics [Dynamic Analysis](https://modeldiplomat.com/learn/lessons/dynamic-analysis) [Hidden Stakeholders](https://modeldiplomat.com/learn/lessons/hidden-stakeholders) [Engagement Strategies](https://modeldiplomat.com/learn/lessons/engagement-strategies) [Stakeholder Mapping Workshop](https://modeldiplomat.com/learn/lessons/stakeholder-workshop) Courses Guided courses that go deeper on the topic [Crisis Management](https://modeldiplomat.com/learn/courses/crisis-management) [Advanced Negotiation](https://modeldiplomat.com/learn/courses/advanced-negotiation) [Multilateral Negotiation](https://modeldiplomat.com/learn/courses/multilateral-negotiation) [Policy Brief Writing](https://modeldiplomat.com/learn/courses/policy-brief) The states in play, with the data that shapes their stance [South Africa](https://modeldiplomat.com/country/south-africa) [Country dossier](https://modeldiplomat.com/country/south-africa) [United States](https://modeldiplomat.com/country/united-states) [Country dossier](https://modeldiplomat.com/country/united-states) [China](https://modeldiplomat.com/country/china) [Country dossier](https://modeldiplomat.com/country/china) [Russia](https://modeldiplomat.com/country/russia) [Country dossier](https://modeldiplomat.com/country/russia) [United Kingdom](https://modeldiplomat.com/country/united-kingdom) [Country dossier](https://modeldiplomat.com/country/united-kingdom) [Estonia](https://modeldiplomat.com/country/estonia) [Country dossier](https://modeldiplomat.com/country/estonia) [Israel](https://modeldiplomat.com/country/israel) [Country dossier](https://modeldiplomat.com/country/israel) [Ireland](https://modeldiplomat.com/country/ireland) [Country dossier](https://modeldiplomat.com/country/ireland) [Germany](https://modeldiplomat.com/country/germany) [Country dossier](https://modeldiplomat.com/country/germany) [Singapore](https://modeldiplomat.com/country/singapore) [Country dossier](https://modeldiplomat.com/country/singapore) [Ukraine](https://modeldiplomat.com/country/ukraine) [Country dossier](https://modeldiplomat.com/country/ukraine) [Australia](https://modeldiplomat.com/country/australia) [Country dossier](https://modeldiplomat.com/country/australia) [India](https://modeldiplomat.com/country/india) [Country dossier](https://modeldiplomat.com/country/india) [Nigeria](https://modeldiplomat.com/country/nigeria) [Country dossier](https://modeldiplomat.com/country/nigeria) ## Frequently asked questions - - Free account Save conferences, research any topic with AI, build position papers, and keep your daily prep streak — free. [Create free account](https://modeldiplomat.com/sign-up?next=%2Fconferences%2Fprofessional%2Fcyber-security-summit-south-africa-38th-edition-2027) Already a member? [Log in](https://modeldiplomat.com/sign-in?next=%2Fconferences%2Fprofessional%2Fcyber-security-summit-south-africa-38th-edition-2027) Free account Save conferences, research any topic with AI, build position papers, and keep your daily prep streak — free. [Create free account](https://modeldiplomat.com/sign-up?next=%2Fconferences%2Fprofessional%2Fcyber-security-summit-south-africa-38th-edition-2027) Already a member? [Log in](https://modeldiplomat.com/sign-in?next=%2Fconferences%2Fprofessional%2Fcyber-security-summit-south-africa-38th-edition-2027)