Johannesburg High Court: ZA Companies Face New Security Risks with AI Adoption

• AI is lowering the technical barrier to sophisticated cyber attacks in South Africa.
• Companies operating in South Africa must consider additional security and governance implications of adopting AI.
• The increasing use of AI raises concerns about compliance with local data protection laws, such as POPIA.
• Rapid AI adoption creates visibility challenges, making it difficult for companies to track AI technologies and data processing.

It's no longer about skill. It's about how much imagination you have.

The adoption of artificial intelligence (AI) in South Africa has created new security and governance challenges for companies, according to speakers at TrendAI's Spark 2026 event. Emmanuel Tzingakis, technical manager for Africa and venture markets at TrendAI, noted that AI is lowering the technical barrier to sophisticated cyber attacks, making it easier for attackers to launch complex attacks without requiring extensive technical expertise. In fact, Tzingakis stated that 'it's no longer about skill. It's about how much imagination you have.' This shift in the economics of cyber crime has significant implications for companies operating in South Africa, which must now consider the additional security and governance implications of adopting AI.

The increasing use of AI in South African businesses also raises concerns about compliance with local data protection laws. Companies must ensure that their AI applications are secure and do not compromise sensitive information, as required by the Protection of Personal Information Act (POPIA). Furthermore, the rapid adoption of AI creates visibility challenges, making it difficult for companies to track which AI technologies are being used, what data is being processed, and how those technologies operate within their environments. This lack of visibility can lead to a governance gap, particularly when AI applications are introduced outside established technology processes.

The integration of AI into South African businesses has significant implications for security and governance. As Emmanuel Tzingakis noted, 'AI is not going away,' and companies must adapt to this new reality. The use of AI in cyber attacks creates a new attack surface, making it essential for companies to evolve their security architecture to address these challenges. Moreover, the speed of AI adoption requires companies to prioritize visibility and governance, ensuring that they can effectively manage and secure their AI applications. As Grant Hughes, CISO at GVW Group, emphasized, 'if we don't have visibility, there's no way that we can apply the policy.' Companies must take proactive steps to address these challenges and ensure that their AI adoption does not compromise security and governance.

Companies operating in South Africa must now consider the additional security and governance implications of adopting AI, including visibility challenges, new attack surfaces, and compliance with local data protection laws.

Source: Original reporting via TrendAI