Lower Your Cyber Insurance Premium: The SA Guide to Cheaper Cover
Learn how to lower your cyber insurance premium by implementing verifiable controls, reducing risk exposure, and avoiding common application mistakes.
Cybersecurity Budgets: How SA Businesses Should Spend in 2026
Most South African boards treat the cybersecurity budget as a line item to be minimized. This is a failure of governance. In a climate where ransomware is no longer a possibility but a certainty, the budget is not a cost of doing business. It is a risk management tool. If you are looking at your…
Security Awareness Training for South African Businesses: The POPIA-Grade Guide
Most South African businesses spend real money on security technology and almost nothing on the people who click the links that bypass it. Security awareness training is the structured programme that teaches your staff to recognise phishing, handle data properly and report incidents early, and it is the single control that addresses the biggest gap…
Cyber Insurance in South Africa: What Your Policy Really Covers in 2026
Cyber insurance in South Africa has moved from nice-to-have to board agenda in under three years, and most business owners still misunderstand what their policy actually covers. The misconception is simple and expensive: people believe the insurer pays when they are breached. The truth is that the insurer pays when you met your obligations, and…
How to Build a Cybersecurity Incident Response Plan for Your Business
A cybersecurity incident response plan is the document you write on a calm Tuesday that you will follow on the worst day of your working life. It is a short, pre-agreed playbook for the first hours and days after an attack: who leads, who calls the lawyers and the insurers, how you preserve evidence, when…
Cyber Attacks on Small Businesses: What Hits SMEs Hardest
Small and medium businesses absorb a disproportionate share of successful cyber attacks, and the reason is simple: attackers go where the defenses are thin. An enterprise runs a security operations center and a dedicated team. A 40-person business runs one busy IT person, if that, and a password policy nobody follows. This guide covers the…
Cyber Insurance in South Africa: What Insurers Check
Cyber insurance in South Africa has hardened. Insurers now check your actual security controls before quoting, and paying the premium is no longer enough to guarantee a payout. If you want cover in 2026, you need multi-factor authentication, endpoint protection, working backups, and a written incident response plan. This guide explains what insurers check, why…
POPIA Compliance Checklist for South African Businesses in 2026
POPIA compliance is not a one-time project. It is an ongoing obligation that affects every business in South Africa that processes personal information — which is essentially every business. The Protection of Personal Information Act has been fully in force since 2021, and the Information Regulator has moved from education phase to enforcement phase. If…
What Your Board Doesn’t Know About AI And Why That’s a Risk
A director at one of South Africa’s mid-sized financial services firms recently asked me a question I hear far too often: “We’re using AI for a few automation tasks. Do we really need a board-level policy?” Within an hour, we had mapped three different AI tools being used across the company that the board had…
Do You Need a vCISO or a Fractional CTO? How to Tell
A vCISO and a fractional CTO sound alike but solve different problems. One builds the future, one protects the present. How to tell which senior help your business actually needs.
