Agenda

Cybersecurity is at the center of global security and prosperity as digitalization spurs in developed and developing countries. The challenge is to create a thriving digital society that is resilient to cyber threats and with knowledge and capabilities to exploit opportunities and manage risks. This is especially important in low- and middle-income countries, which are investing heavily in digital infrastructure to accelerate their development goals. 

Africa is in the third year of implementing the Digital Transformation Strategy 2020-2030, expecting to invest massively in cyberspace. Member states – as part of digital transformation, are working to integrate digital systems with other sectors of the economy, such as finance, health, education, transport, and others. While digital transformation is crucial for sustainable development, it can pose severe cyberattacks if member states are Cybersecurity immature. 

Based on ECA 2022 report, African Cybersecurity is immature compared to other regions, making the continent susceptible to cyberattacks as the African digital market is forecasted to reach USD 712 billion by 2050[1]. The continent is estimated to lose Africa is losing $4 billion annually to cybercrime[2]. Africa's low level of preparedness in Cybersecurity is costing Member States on average 10% of their GDP[3]. That raises the need for the African government to establish a legal and regulatory framework on Cybersecurity and invest in capacity building to develop local talents. Only slightly more than a half of 54 African countries assessed have introduced cybersecurity legislation[4]. Further, the continent has had a shortage of 100,000 proficient cybersecurity personnel since 2020 – which will only rise as Africa’s e-commerce industry expects to reach $75 billion by 2025[5]. According to ITU, “Africa’s levels of commitment to cybersecurity – as well as capacity for response to threats – remain low compared to other continents."[6].

To support African countries to build resilience in cyberspace. The Economic Commission for Africa (ECA) launched the Guideline for a Model Law on Cybersecurity of African Union Member States during the 17th Internet Governance Forum (IGF) held in Addis Ababa. While the Guideline is not a binding law or legislation and does not seek to limit the operation of any national or regional law, it provides a set of guiding principles that African Member States may follow as they set out to establish standards for ensuring Cybersecurity. The model guideline is expected to provide guidance to synergize intercontinental cyber norms that enable African member states to take proactive measures to counter cyber threats. 

The draft guidelines indicated essential areas that policymakers and legal experts could explore in suggesting member states implement the Lomé Declaration through national legislative processes. Recalling that on 23rd March 2022, African Heads of State and Government adopted the Lomé Declaration on Cybersecurity and the Fight Against Cybercrime in Africa to ensure Cybersecurity takes top priority at the highest level of governance.

OBJECTIVE OF THE SESSION

The main objective of the side event is to capacitate Member states – policymakers and experts on cyber security on the developments in the Cybersecurity landscape in Africa. The session will:

• Present the in-depth research that clearly shows the maturity of Cybersecurity in Africa and its linkages to economic growth (Gross Domestic Product),
• ECA will share the guideline Model law on Cybersecurity that can be used to guide Member States to develop Cybersecurity and Cybercrime Legal and Regulatory Frameworks in their countries. 
• Cybersecurity experts, as part of the panel, will share development and opportunities for Cybersecurity in the continent and responds to questions and comments from Member States. 

[1] https://www.worldbank.org/en/programs/cybersecurity-trust-fund/overview

[1] https://techcrunch.com/2022/06/08/new-report-examines-africas-growth-in-the-digital-economy-and-vc-investment-landscape/?guccounter=1&guce_referrer=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8&guce_referrer_sig=AQAAANXrWRKs6VHaeH4Yi9YF3D13ePxGEpUkAYUjVLIQRkNodAGCc1Z2osef7Qm5jdq_vzoSWMWCYw_LpsXSk9v9OhExVIIqO_MPCaqU3tjqRLSoCBKuIurRr73CICu5mXS3-UCJfUFvnAO_Sx-c_-tnjUuy4xZyt0JRC4MnFqf25XhZ
[2] https://www.weforum.org/agenda/2022/08/africa-must-act-to-address-cybersecurity-threats/
[3] https://www.uneca.org/stories/eca-launches-the-guideline-for-a-model-law-on-cybersecurity-during-the-17th-igf
[4] https://www.weforum.org/agenda/2022/08/africa-must-act-to-address-cybersecurity-threats/
[5] https://thegfce.org/cybercrime-and-cybersecurity-trends-in-africa/
[6] https://www.itu.int/hub/2021/09/are-african-countries-doing-enough-to-ensure-cybersecurity-and-internet-safety/
[7] https://www.worldbank.org/en/programs/cybersecurity-trust-fund/overview