Policy, Innovation, and Cybersecurity: Lufuno T. Tshikalange on Africa’s ICT Future

In an exclusive interview with Telecom Review Africa, Lufuno T. Tshikalange, ICT policy and regulation expert, highlighted Africa’s secure digital transformation. From bridging the connectivity gap to strengthening cybersecurity and boosting local innovation, Tshikalange outlined the critical steps needed to build a sustainable and inclusive digital future for the continent.

What steps are needed to achieve affordable and inclusive connectivity for all Africans, especially marginalized communities?

According to the NEPAD report on the implementation of the AU Agenda 2063, Africa’s communication and infrastructure connectivity fell short of expectations. The goal of doubling ICT penetration was only partially achieved, and ICT’s contribution to gross domestic product (GDP) reached just 39% of the 2019 target. Similarly, the 2024 SDG Progress Report indicated that only 17% of global sustainable development goal (SDG) targets are on track, with Sub-Saharan Africa experiencing the most regression.

Improved telecom infrastructure and increased mobile device adoption have enhanced internet access, enabling digital services like mobile payments and online shopping. Yet, in 2021, internet penetration in Africa remained at 43%, far below the global average of 66%. Connectivity gaps, especially between rural and urban areas, persist. As of 2023, mobile internet adoption was 56% in rural areas versus 77% in urban settings. In Sub-Saharan Africa, this gap increased, signaling a regression to pre-pandemic levels.

To address this, several steps are necessary:

1. The first step is to take stock of progress toward Agenda 2063’s goal 10. Understanding context and disparities between countries is essential. This should include community-level needs assessments to identify specific barriers to connectivity. Promoting digital literacy is equally crucial for effective digital inclusion, enabling marginalized communities to fully participate in the digital economy.
2. Political will is critical to accelerating progress on universal access and digital inclusion. Demonstrating the socio-economic benefits through impact studies and real-world success stories can help galvanize commitment and move policy from intention to action.
3. Many African countries have universal access funds, but challenges in implementation have limited their impact, particularly on affordability and inclusion. To accelerate progress toward Agenda 2063 and SDG 9, regulatory frameworks should be reviewed to support infrastructure sharing and open spectrum access for new entrants – lowering costs and increasing competition.
4. Regulatory reform should foster an environment that encourages infrastructure investment and supports digital literacy. A collaborative multistakeholder approach can help build local capacity and empower communities through open access and community networks.
5. Affordability remains a critical issue. Universal access strategies must aim to reduce connectivity costs. Affordability remains a critical issue. Universal access strategies must therefore focus on reducing connectivity costs through mechanisms such as targeted subsidies for low-income users. Additionally, investments in local content and innovative financing, including public-private partnerships, can support sustainable cost reductions and infrastructure growth. Targeted subsidies for low-income users would also help bridge the digital divide.

How can Africa reduce tech import dependency and harness AfCFTA to drive local telecom manufacturing and innovation?

African leaders have pledged to allocate at least 1% of GDP to gross expenditure on research and development (GERD) to boost innovation and productivity. However, this target remains unmet, underlining the urgency for change.

1. To harness AfCFTA as a vehicle for telecom innovation and reduced tech import dependency, African governments must build the enabling environment — by advancing local content development, strengthening industrialisation, and ensuring strategic investment through strong political commitment.
2. African governments must meet the GERD target of 1% of GDP by significantly increasing national investment in research and development (R&D) and local innovation. This is essential to reduce import dependency, strengthen regional security, and drive inclusive industrialisation.
3. Global supply disruptions expose Africa’s tech import vulnerabilities. Strengthening local telecom manufacturing and supply chains will boost resilience, reduce dependence, and support a sustainable, self-sufficient digital future.
4. Achieving the GERD target requires investing in high-impact sectors including support for research institutions, academia–industry partnerships, and startup ecosystems, while building workforce skills to drive sustained innovation and local manufacturing.

How can African telecom operators effectively tackle rising cyber threats and protect against financial losses?

To effectively tackle rising cyber threats and protect against financial losses, African telecom operators should consider the following steps:

1. Implement appropriate cybersecurity governance, as state-of-the-art technology without proper governance can increase cyber vulnerabilities. Cybersecurity governance provides the strategy, structure, and processes needed to use technology securely. Without it, the latest technology can become a liability rather than an asset.
   1. Adhere to good practices to ensure a safe, secured, and compliant telecoms and cyberspace environment. Operators should also comply with local regulations, such as the Protection of Personal Information Act (POPIA) and align with regional regulatory frameworks like the Malabo Convention and global standards such as the General Data Protection Regulation (GDPR). These regulations provide key risk management strategies and are crucial for jurisdictions without established cybersecurity and data protection laws. Adherence to regional frameworks like the Malabo Convention and GDPR is therefore not just legal compliance; it’s a cornerstone of responsible data handling, robust risk management, and building essential trust in today’s globally interconnected digital landscape.
   1. Embed security by design in their sourcing and deployment strategies. Adhering to internal cybersecurity governance and minimum-security baselines can significantly reduce the attack surface and improve the overall security posture.
   1. Collaborate with each other to build robust resilience and a strong cybersecurity posture. In today’s interconnected world, sharing information, best practices, and threat intelligence is crucial for organizations to stay ahead of the curve.
   1. Perform privacy impact assessments before and after procuring and deploying infrastructure to ensure adequate measures and standards exist, regardless of whether it is a new acquisition or upgrade. Vulnerability assessments should be continuous to ensure that existing security safeguards are still effective.
   1. Establish a fit-for-purpose compliance management framework to strengthen and enhance compliance with applicable regulatory frameworks, providing a baseline integrated approach to regulatory compliance.
   1. Equip and train employees, the first line of defense, and conduct awareness sessions to inform them of the cybersecurity governance frameworks and the compliance management framework in place. This is critical to minimizing the growing threat of insider threats and building a resilient cybersecurity culture.
   1. Develop an appropriate third-party and vendor risk management strategy that analyzes and minimizes risks, serving as a due diligence process for vendors. Third-party and vendor management strategy is a fundamental part of the organization’s overall information security risk management process and should form an integral part of the organization’s overall risk management program.
   1. Employ contract management as an effective risk management strategy to achieve security safeguards, enforce compliance, minimize risks, ensure vendor performance monitoring, and maximize value for money while reducing financial risks.

Is Africa’s current telecom regulatory framework sufficient to drive innovation and growth, or is reform necessary?

Though the AU Digital Transformation Strategy and the Digital Compact may be applied as a baseline for telecoms regulations, currently, there’s no single “consolidated regulation” for the African telecommunications sector. However, there are ongoing efforts at the continental and regional levels to harmonize policies, promote best practices, and improve connectivity through the African Telecommunication Union and Regional Bodies like the SADC. Therefore, within the spirit of Agenda 2063 to have an integrated Africa, there is a need:

1. To harmonize existing regulatory frameworks from the African regions and individual Member States aimed at promoting an integrated approach that drives innovation, facilitates growth, and also supports the effective implementation of AfCFTA, the Digital Compact, and the AI Continental Strategy. This harmonization should strive for a balance between fostering competition and protecting consumers, ensuring a level playing field for all stakeholders.
2. Reform from individual States is crucial to ensure that the regulatory environment is not only enabling, but agile and responsive to the dynamic nature of the ICT environment and emergence of new technologies. This will not only enable accessible and affordable connectivity, but will facilitate seamless cross-border communication and business transactions. Such reforms should also consider promoting local content development and investing in digital skills to further empower the African population and foster digital entrepreneurship.
3. Furthermore, it is crucial to recognize that regulatory reform should not be viewed as a one-time event, but rather as a continuous process of adaptation and refinement. This requires ongoing dialogue between regulators, industry players, and other stakeholders to ensure that regulations remain relevant and effective in the face of rapid technological advancements. Additionally, ongoing reform must also address cybersecurity concerns and strengthen data protection to foster trust and promote the adoption of digital services across the continent.

How can we ensure that emerging technologies deployed in Africa are not only innovative but also practical, maintainable, and contribute to capacity building within the local ecosystem?

Deployment of emerging technologies in Africa must first and foremost be strategically context-based, directly addressing local needs, and achieving the socio-economic objectives of the AU Agenda 2063, the Digital Transformation Strategy 2020-2030, and the African Digital Compact 2024. Consideration of the unique cultural, economic, and infrastructural landscapes in different African regions would be crucial to tailor technology applications effectively. This means prioritizing value-added deployments over simply adopting technology for its own sake, ensuring tangible benefits for African communities.

• We need an innovation ecosystem that is responsive to the needs on the ground to bridge the widening digital divide. This necessitates a multi-stakeholder collaborative approach, fostering a robust ecosystem that empowers Africa to transition from a heavy reliance on imports to becoming a key contributor and major player in the global digital economy. This must be a collaborative effort amongst multi-stakeholders including governments, the private sector, academia, and civil society organizations to leverage diverse expertise and resources.

• Digital public goods offer Africa a significant opportunity, not only to foster innovation, but also to build the much-needed capacity that supports the local ecosystem, enabling technology transfer and ownership of intellectual property within the continent. Adopting open-source technologies can foster transparency, reduce costs, and promote local customization and adaptation. For example, the African Continental Free Trade Area (AfCFTA) presents a significant opportunity to scale digital innovations across the continent. Harmonizing digital policies and regulations can create a larger market for African startups and facilitate cross-border collaboration. Importantly, prioritizing cybersecurity and data privacy measures is crucial to building trust in digital technologies and encouraging their adoption. Therefore, robust legal frameworks and awareness campaigns are necessary to protect users from cyber threats and ensure responsible data processing.

• To maximize the impact of technology deployments, it is important to prioritize large-scale digital literacy programs to equip the population with the skills to effectively use, adapt, and innovate with technology, driving sustainable and inclusive growth. These programs should be designed to cater to diverse age groups and skill levels, ensuring that no one is left behind in the digital revolution.

• To ensure sustainability, enacting policies that incentivize investment in local technology startups and research institutions is critical for fostering a self-sufficient and resilient digital ecosystem. Furthermore, the development of local talent in science, technology, engineering and mathematics (STEM) fields through investment in education, training, and mentorship programs must be prioritized. This empowers African youth with the skills to thrive in the digital economy and foster collaboration between academia, industry, and government. This will also help align education and training programs with the evolving needs of the market, and helps ensure that the workforce is prepared to meet the demands of emerging technologies.

Furthermore, enacting policies that incentivize investment in local technology startups and research institutions is critical for fostering a self-sufficient and resilient digital ecosystem. This investment ensures that innovation is not only generated but also sustained within the continent, contributing to long-term capacity building.