Telecom
Why Digital Trust Matters: Secure, Responsible AI for African SMEs?
By Kehinde Ogundare, Country Head, Zoho Nigeria
For years, security for SMEs across sub-Saharan Africa meant metal grilles and alarm systems. Today, the most significant risks are invisible and growing faster than most businesses realise.
Kehinde Ogundare
Artificial Intelligence has quietly embedded itself into everyday operations. The chatbot responding to customers at midnight, the system forecasting inventory requirements, and the software identifying unusual transactions are no longer experimental technologies. They are becoming standard features of modern business tools.
Last month’s observance of Safer Internet Day on February 10, themed ‘Smart tech, safe choices’, marked a pivotal moment. As AI adoption accelerates, the conversation must shift from whether businesses should use AI to how they deploy it responsibly. For SMEs across Africa, digital trust is no longer a technical consideration. It is a strategic business imperative.
The evolving threat landscape
Cybersecurity threats facing sub-Saharan African SMEs have moved well beyond basic phishing emails. Globally, cybercrime costs are projected to reach $10.5 trillion this year, fuelled by generative AI and increasingly sophisticated social engineering techniques. Ransomware attacks now paralyse entire operations, while others threats quietly extract sensitive customer data over extended periods.
The regional impact is equally significant. More than 70% of South African SMEs report experiencing at least one attempted cyberattack, Nigeria faces an average of 3,759 cyberattacks per week on its businesses, Kenya recorded 2.54 billion cyber threat incidents in the first quarter of 2025 alone, whilst Africa loses approximately 10% of its GDP to cyberattacks annually.
The hidden risk of fragmentation
A common but often overlooked vulnerability lies in digital fragmentation.
In the early stages of growth, SMEs understandably prioritise affordability and agility. Over time, this can result in a patchwork of disconnected applications, each with separate logins, security standards, and privacy policies. What begins as flexibility can involve into operational complexity.
According to IBM Security’s Cost of a Data Breach Report, companies with highly fragmented security environments experienced average breach costs of $4.88 million in 2024.
Fragmented systems create blind spots, each additional data transfer between applications increases exposure. Inconsistent security protocols make governance harder to enforce. Limited visibility reduces the ability to detect anomalies early. In practical terms, complexity increases risk.
Privacy-first AI as a competitive differentiator
As AI capabilities become embedded in business software, SMEs face a choice about how they approach these powerful tools. The risks are not merely theoretical.
Consumers across Africa are becoming more aware of data rights and willing to walk away from businesses that cannot demonstrate trustworthiness. According to KPMG’s Trust in AI report, approximately 70% of adults do not trust companies to use AI responsibly, and 81% expect misuse. Meanwhile, studies also show that 71% of consumers would stop doing business with a company that mishandles information.
Trust, once lost, is difficult to rebuild. In the digital age, a single data leak can destroy a reputation that took ten years to build. When customers share their payment details or purchase history, they extend trust. How you handle that trust, particularly when AI processes their data, determines whether they return or take their business elsewhere.
Privacy-first, responsible AI design means building intelligence into business systems with data protection, transparency and ethical use embedded from the outset. It involves collecting only necessary information, storing it securely, being transparent about how AI makes decisions, and ensuring algorithms work without compromising customer privacy. For SMEs, this might mean choosing inventory software where predictive AI runs on your own data without sending it externally, or customer service platforms that analyse patterns without exposing individual records. When AI is built responsibly into unified platforms, it becomes a competitive advantage: you gain operational efficiency whilst demonstrating that customer data is protected, not exploited.
Unified platforms and operational resilience
The solution lies in rethinking digital infrastructure. Rather than accumulating disparate tools, businesses need unified platforms that integrate core functions whilst maintaining consistent security protocols.
A unified approach means choosing cloud-based platforms where functions share common security standards and data flows seamlessly. For a manufacturing SME, this means inventory management, order processing and financial reporting operate within a single security framework.
When everything operates cohesively, security gaps diminish and the attack surface shrinks. And the benefits extend beyond risk reduction: employees spend less time on administrative friction, customer data stays consistent, and platforms enable secure collaboration without traditional infrastructure costs.
Safer Internet Day reminds us that the digital world requires active stewardship. For SMEs across the African continent who are navigating complex threats whilst harnessing AI’s potential, digital trust is foundational to sustainable growth. Security, privacy and responsible AI are essential characteristics of any technology infrastructure worth building upon. Businesses that embrace unified, privacy-first platforms will be more resilient against cyber threats and better positioned to earn and maintain trust. In a market where trust is currency, that advantage is everything.
Starting February 2027, Nigerian Communications Commission (NCC), has mandated mobile network operators and other communications service providers to notify it within four hours of detecting any cyberattack.
This is aimed at strengthening the protection of telecom infrastructure and subscriber data.
The directive is contained in the Cyber Resilience Framework for the Nigerian Communications Sector (CRF-NCS) released by the NCC last month.
According to the NCC, the rule will take effect in February 2027, giving operators a year to put in place the necessary monitoring and reporting systems.
Under the framework, telecommunications companies must alert the regulator within four hours of detecting a cyber incident and continue to provide updates every four hours until the situation is contained.
Operators are also required to submit a confirmation report within 24 hours through a dedicated reporting portal.
The commission said the framework is designed to strengthen cybersecurity oversight in a sector that handles vast volumes of sensitive consumer and national infrastructure data.
Cyber threats targeting telecom networks can lead to service disruptions, data breaches affecting subscriber information, malware infections and other attacks capable of crippling communications systems, according to the regulator.
By introducing faster reporting timelines, the commission said it hopes to improve sector-wide situational awareness and ensure quicker response to threats before they escalate into major outages or data compromises.
The framework also requires telecommunications companies to establish dedicated Security Operations Centres (SOC) to monitor networks continuously for suspicious activity and cyber threats.
These centres are expected to detect and report malicious activities promptly while coordinating responses internally.
In addition, each operator must designate a cybersecurity lead responsible for working with the commission’s Computer Security Incident Response Team (CSIRT) to share intelligence and coordinate responses to incidents affecting the communications ecosystem.
The NCC said the new framework forms part of broader efforts to strengthen resilience across Nigeria’s communications infrastructure and promote a unified cybersecurity posture in the sector.
The measures come amid growing global and domestic concern over data breaches and cyber intrusions targeting companies that manage large volumes of digital information.
Telecommunications companies, which serve as gateways for internet traffic, mobile banking, messaging and other digital services, are increasingly seen as critical infrastructure vulnerable to cyber threats.
Nigeria’s telecom regulator has in recent years tightened rules around data protection and network security as the country’s digital economy expands.
A United States federal court in the Southern District of New York has comprehensively dismissed all claims against Binance, the world’s largest cryptocurrency exchange by registered users, in a high-profile lawsuit under the Anti-Terrorism Act (ATA).
Binance
The 62-page decision represents a decisive legal victory, rejecting allegations from 535 plaintiffs who claimed the platform provided material support linked to 64 terrorist attacks.
The court meticulously examined and dismissed every central allegation, ruling that plaintiffs failed to establish Binance assisted terrorists, associated itself with the attacks, participated in or sought to advance them, or engaged in any conspiracy with terrorist organisations.
This full dismissal underscores the absence of evidence supporting the claims, affirming Binance’s long-standing position that the suit was meritless.
Binance General Counsel Eleanor Hughes described the outcome as “a complete vindication of all false allegations.” She emphasised: “The court has unambiguously rejected the false and damaging narrative that Binance assisted terrorists.
“We have always maintained these claims were without merit, and today’s ruling confirms that. We will continue to defend ourselves aggressively against any litigation or reporting that misrepresents who we are and how we operate.”
While the ruling grants plaintiffs 60 days to file an amended complaint in light of a recent appellate decision, Binance expressed strong confidence that no revisions can remedy the “fundamental deficiencies” identified by the court. The exchange views this as a thorough examination and rejection of the underlying assertions.
Binance reaffirmed its commitment to industry-leading compliance infrastructure, proactive regulatory engagement, and robust legal governance worldwide.
The company stressed that its operations do not support, facilitate, or enable terrorism in any form, and it plans to maintain constructive dialogue with regulators while pursuing vigorous defences against misleading narratives.
This development bolsters Binance’s position amid ongoing global scrutiny of crypto platforms, highlighting its operational integrity in a sector often targeted by unsubstantiated claims.
TikTok has announced an additional $200,000 investment in AI media literacy initiatives across Sub-Saharan Africa during its third annual Safer Internet Summit in Nairobi, underscoring the platform’s push for safer online spaces amid rising digital challenges.
TikTok
The two-day event, themed #SaferTogether: ‘Innovation and Safety’, gathered government officials, regulators, safety partners, and industry leaders from the region. It builds on prior summits in Ghana (2024) and Cape Town (2025), focusing on collaborative solutions for online protection.
TikTok’s Head of Government Relations and Public Policy for Sub-Saharan Africa, Tokunbo Ibrahim, stated: “Our mission is clear: to share learnings, tackle challenges, and advance actionable solutions that protect citizens online. By uniting policymakers, innovators, and creators, we ensure all-inclusive conversations for a resilient digital landscape.”
Kenya’s Cabinet Secretary for ICT, Hon. William Kabogo, who opened the summit, added: “This reflects our commitment to collaboration, sector growth, and a safe digital space. We must advance digital innovation, responsible AI governance, and strong regional partnerships.”
Boosting AI Literacy with Local Partners
A summit highlight was TikTok’s expanded $2 million AI Literacy Fund, launched globally in November 2025. The new $200,000 in ad credits targets local organisations to combat misinformation and empower users.
In Sub-Saharan Africa, initial grantees include:
Mtoto News (Kenya): Producing content to help youth engage responsibly with AI.
Africa Check (Nigeria, South Africa, Kenya): Enhancing fact-checking against AI-generated deepfakes.
CJID/DUBAWA (West Africa): Amplifying truth via independent fact-checking to fight information disorder.
Valiant Richey, TikTok’s Global Head of Partnerships, Elections & Market Integrity, said: “We partner with trusted locals because their expertise makes AI literacy impactful, empowering communities as viewers or creators.”
Transparency and Moderation Advances
Delegates explored TikTok’s AI-driven safety measures, including mandatory labelling of AI-generated content (AIGC), advanced detection, and partnerships like the Coalition for Content Provenance and Authenticity (C2PA) for watermarking.
With over 100 million daily uploads, AI aids proactive moderation: Q3 2025 data shows 14 million videos removed in Sub-Saharan Africa, 96.7% via automated tech, complementing human oversight.
The summit ended with pledges for ongoing digital safety efforts across the region.
Meta to Charge Location Fees on Ads to Six Countries from July 1, 2026
Tizeti Tests Ad-Funded Internet Access Model in Nigeria and Ghana
Court Orders Final Forfeiture of N81.1m Sterling Bank Fraud Funds
NCC Orders Telcos to Report Cyberattacks Within 4 Hours from 2027
FG Mulls Age Restriction for Kids on Social Media
Dr. Cairo Ojougboh Foundation Bolsters Nigeria’s Education Drive with ₦2.7m Student Support
Kaspersky Brings more Transparency to Threat Detection with New Hunt Hub
Kaspersky Discovers New Phishing Campaign Exploiting Google Tasks Notifications to Steal Corporate Credentials
esentry 2025 Report Shows Healthcare, Financial Services and Telecoms as Staging Grounds for Increased Cyberattacks in Africa
AfDB, UNDP Launch $10Bn AI Initiative for Africa
Telecom3 days agoDimension Data Nigeria Seals N20bn Bond Deal to Bridge Digital Infrastructure Gap
Telecom3 days agoFirst Batch of Nigerian Undergraduates Emerged in Airtel Africa Foundation Scholarships Programme
General News2 days agoZedvance Hits ₦96bn Lending Milestone, Eyes ₦250bn Target in 2026
E-Business3 days agoCBN Affirms Alpha Morgan Bank’s Capitalisation
Broadcasting2 days agoMadonna University Taps Tech Guru Adote for Strategic Board Role
E-Financial3 days agoPolaris Bank Marks IWD2026 with Renewed Pledge to Women’s Empowerment
General News3 days agoMojisola Sayo-Kazeem Reflects on Leadership, Opportunity, Women in Tech @ IWD
News3 days agoEFCC Seals Anti-Corruption Alliance with Anambra Security Chiefs, Traditional Rulers