African Cybersecurity Leaders Gather in Rabat as AI Raises the Stakes

African governments are facing a rapidly changing cybersecurity landscape in which artificial intelligence is giving attackers new ways to identify vulnerabilities, automate malicious activity and scale cyber operations. Against that backdrop, senior cybersecurity officials from across the continent are meeting in Rabat from October 6 to 8 for an executive-level training programme designed to strengthen strategic responses to emerging digital threats.

The three-day Cyber Academy brings together senior executives, technical managers and cybersecurity specialists from African institutions, alongside experts from the World Bank and the wider cybersecurity community. Rather than concentrating solely on technical defence, the programme seeks to strengthen the ability of government leaders to make strategic decisions during cyber crises and to integrate security considerations into national digital policies.

The initiative is organised by Morocco's General Directorate of Information Systems Security (DGSSI), the World Bank and the Smart Africa Digital Academy (SADA).

Artificial intelligence changes the threat landscape

The rapid adoption of AI is adding a new layer of complexity to an already difficult security environment. Cybercriminals can increasingly use automated tools to identify weaknesses, generate malicious code and conduct large-scale phishing operations, potentially reducing the time and expertise traditionally required to launch sophisticated attacks.

William Zhang, the World Bank's lead expert in digital transformation and cybersecurity, warned that AI is intensifying pressures already facing cybersecurity organisations that lack sufficient financial and human resources.

For African governments, the problem is particularly significant where legacy information systems remain in operation. Older infrastructure can create vulnerabilities that automated tools may identify and exploit at speed.

The result is a shift in the role of cybersecurity within government. Protecting networks is no longer simply a technical responsibility for IT departments. Decisions about artificial intelligence, critical infrastructure, data protection and emergency response increasingly require direct involvement from senior public officials.

From technical defence to executive leadership

The Rabat programme reflects this broader transformation. Its curriculum addresses cybersecurity strategy, cyber operations, crisis management and international cooperation, while also examining the implications of digital and data sovereignty.

Rym Jarou, director of partnerships, events and communication at SADA, stressed the need for leaders overseeing digital transformation to understand cybersecurity at both operational and strategic levels.

The programme therefore aims to equip decision-makers with tools that extend beyond incident response. Participants are expected to examine how cybersecurity units should be managed, how AI can be introduced responsibly and how national institutions can coordinate when a major cyber incident occurs.

Tawfiq Ali Lakssar, who heads the cybersecurity unit at Yemen's Ministry of Telecommunications and Information Technology, highlighted the importance of developing an executive foundation capable of connecting cybersecurity management with AI governance.

Practical exercises form a central part of the training. Participants will work through simulated cyber crises, assess response options and exchange experiences with counterparts from other countries.

Digital sovereignty becomes a strategic priority

Cybersecurity is also becoming closely linked to the question of where government and citizen data is stored and controlled.

Across Africa, governments are seeking greater control over sensitive information by expanding domestic data infrastructure and developing the expertise required to secure it. The objective extends beyond technological independence: it also concerns the protection of public data against ransomware, espionage and other forms of intrusion.

Smart Africa, an alliance of more than 30 African countries, has placed digital transformation and capacity building among its priorities. Through SADA, the organisation is seeking to strengthen the human capital needed to support Africa's expanding digital economy.

That effort comes at a time when many governments face a shortage of specialised cybersecurity professionals. Retaining experienced personnel can be difficult because private-sector employers are often able to offer more competitive salaries.

A growing economic risk for Africa

The stakes are rising as digitalisation expands into sectors that underpin national economies.

Cybercrime is estimated to cost Africa roughly $4 billion annually, while the continent faces a cybersecurity workforce gap exceeding 100,000 positions. South Africa, Kenya and Nigeria have traditionally experienced some of the highest volumes of cyberattacks, while infrastructure in North Africa is also coming under increasing pressure.

The projected expansion of Africa's digital economy adds another dimension to the challenge. With the continent's digital economy expected to reach $712 billion by 2050, vulnerabilities in banking networks, electricity systems, ports and other critical infrastructure could have consequences far beyond the digital sphere.

A successful ransomware attack against a major port, financial institution or utility provider could interrupt essential services, disrupt trade and generate substantial economic losses.

Morocco uses Rabat forum to strengthen regional cooperation

Morocco's role as host gives the country an opportunity to position its cybersecurity experience within a broader African framework.

Over the past decade, Morocco has developed its national cybersecurity architecture, with the DGSSI operating under the National Defense Administration and establishing rules aimed at protecting sensitive infrastructure.

At the same time, Morocco is confronting a growing threat environment of its own. A cyber breach targeting the National Social Security Fund in April 2025 exposed personal and financial information belonging to almost two million citizens.

Figures presented for the Cyber Academy programme indicate that Moroccan networks faced 12.6 million web attack attempts in 2024, placing Morocco among Africa's most targeted countries. More than 75,000 targeted attacks were also recorded against Moroccan targets during the first part of 2025.

International assessments nevertheless point to significant progress in the country's cybersecurity capabilities. Morocco was classified in Tier 1 of the International Telecommunication Union's 2024 Global Cybersecurity Index, recording a score of 97.49 out of 100. It ranked 43rd globally in the National Cyber Security Index in August 2026.

The next test is keeping digital growth secure

The central challenge emerging from the Rabat meeting is not whether African governments will continue to digitise their economies and public services, but whether their security capabilities can keep pace with that transformation.

AI is accelerating both sides of the equation. Governments can use it to improve detection and response, while attackers can exploit the same technological advances to discover weaknesses and conduct operations at greater speed and scale.

For African cybersecurity leaders, building resilience will therefore require more than stronger software and infrastructure. It will depend on executive leadership, skilled personnel, regional cooperation, effective crisis planning and clear rules governing AI and data.

The Cyber Academy in Rabat is designed to address precisely that gap: preparing decision-makers to treat cybersecurity not as a secondary technical function, but as a core component of national digital strategy.