A cybersecurity incident response plan is the document you write on a calm Tuesday that you will follow on the worst day of your working life. It is a short, pre-agreed playbook for the first hours and days after an attack: who leads, who calls the lawyers and the insurers, how you preserve evidence, when…
Small and medium businesses absorb a disproportionate share of successful cyber attacks, and the reason is simple: attackers go where the defenses are thin. An enterprise runs a security operations center and a dedicated team. A 40-person business runs one busy IT person, if that, and a password policy nobody follows. This guide covers the…
Cyber insurance in South Africa has hardened. Insurers now check your actual security controls before quoting, and paying the premium is no longer enough to guarantee a payout. If you want cover in 2026, you need multi-factor authentication, endpoint protection, working backups, and a written incident response plan. This guide explains what insurers check, why…
POPIA Compliance Checklist for South African Businesses in 2026 POPIA compliance is not a one-time project. It is an ongoing obligation that affects every business in South Africa that processes personal information — which is essentially every business. The Protection of Personal Information Act has been fully in force since 2021, and the Information Regulator…
A director at one of South Africa’s mid-sized financial services firms recently asked me a question I hear far too often: “We’re using AI for a few automation tasks. Do we really need a board-level policy?” Within an hour, we had mapped three different AI tools being used across the company that the board had…
A vCISO and a fractional CTO sound alike but solve different problems. One builds the future, one protects the present. How to tell which senior help your business actually needs.
POPIA’s hardest demands land in the hours after a breach. What you must legally do, who you must tell, and what the first 72 hours should contain for a South African business.
Most South African businesses have a cybersecurity posture that looks better on paper than in practice. Here is why the gap exists and what to do about it.
Most South African businesses completed their initial POPIA implementation and moved on. The problem is that compliance is not a project with an end date.
The fractional CTO model is growing in South Africa but there is still confusion about what it is. Here is when it makes sense — and when it does not.