POPIA breach reporting exposes gaps in incident response
Cyber incidents are not new, but the way organisations are expected to respond to them is changing. Under the Protection of Personal Information Act (POPIA), breach reporting has increased significantly in South Africa. By Ryan Boyes, senior security administrator at...
PIC debacle shines a spotlight on patronage in SA
The prompt appointment of the Deputy Minister for Planning, Monitoring, and Evaluation, Seiso Mohai, as chair of the Public Investment Corporation (PIC) has raised concerns about ongoing patronage at the SOE. This is especially troubling in light of the recent...
An SA perspective on AI chatbots and corporate liability
With the growing use of artificial intelligence and its integration into corporate systems, a key question arises: can a company be held responsible for misleading statements made by its AI chatbot to a customer? By Erwyn Durman, partner; Manno Manavhela, associate;...
Fast AI, slow governance: The gap that could cost enterprises
South African organisations are no longer debating whether to adopt artificial intelligence. Across Africa, 64% of employees now report using AI at work in the past year, ahead of the 54% global average, and 76% believe generative AI improves the quality of their work...
Getting off the grey list was compliance. Staying off will take credibility
South Africa completed its Financial Action Task Force (FATF) action plan and left the grey list in October 2025. The more telling test now is whether the systems built under pressure remain effective when there is no deadline forcing the issue, writes Bradley...
AI risk is the next test of ESG maturity
Artificial intelligence (AI) has moved from experiment to infrastructure. It is being built into customer service, credit processes, recruitment, operations, compliance, and strategy. By Prof Yudhvir Seetharam, chief analytics officer at FNB Business In many...
The real test of agentic AI is accountability, not autonomy
When businesses talk to me about agentic AI, the conversation usually starts with efficiency. They want to know whether an agent can take enough repetitive work off an overstretched team to justify the investment, and how soon that value will show. By Nicol...
Cyber insurance is forcing organisations to take compliance seriously
Cyber insurance has typically been a grudge purchase, but it is rapidly becoming something businesses cannot operate without. By Ryan Boyes, senior security administrator at Galix While it is not a legal requirement in South Africa, organisations are now expected to...
What happens to compliance when AI makes the decision?
Artificial intelligence (AI) is moving steadily from helping businesses make decisions to making more of them. By Sameer Kumandan, MD of SW360 It can assess applications, prioritise cases, identify unusual behaviour, score risk and determine which customers, suppliers...
Security governance is not just a leadership problem. It is a personal one
There is a comfortable version of security governance that many boards have already adopted. Name an executive to own the risk. Add cyber to the audit committee agenda. Report annually. Job done. By Hendrik Kruger, chief technology officer (CTO) and CISO, Cloud On...
SA’s AI rules won’t land until 2027. waiting for them is a choice
Phone your bank, your medical aid or your insurer this week and there is a fair chance the voice that answers will not be human. It will ask for your ID number. It will pull up your balance, your claims history, the last three conversations you had with the brand. By...
RelyComply integrates LSEG World-Check On Demand
RelyComply has announced a partnership with LSEG Risk Intelligence to integrate World-Check On Demand into its financial crime compliance platform, helping global financial institutions strengthen screening, due diligence and ongoing monitoring workflows. World-Check...