POPIA Breach Notification: What You Legally Must Do in the First 72 Hours
POPIA’s hardest demands land in the hours after a breach. What you must legally do, who you must tell, and what the first 72 hours should contain for a South African business.
Your Security Policy and Your Security Reality Are Not the Same Thing
Most South African businesses have a cybersecurity posture that looks better on paper than in practice. Here is why the gap exists and what to do about it.
POPIA Is Not a Once-Off Exercise
Most South African businesses completed their initial POPIA implementation and moved on. The problem is that compliance is not a project with an end date.
What a Fractional CTO Actually Does — and When to Get One
The fractional CTO model is growing in South Africa but there is still confusion about what it is. Here is when it makes sense — and when it does not.
The Three Questions Every Board Should Be Asking Their IT Team
Most boards receive IT updates that are either too technical or too vague. Here are the three questions that actually cut through — and why any board member can ask them.
