Cybersecurity is entering uncharted waters. A rapidly shifting global landscape and threat environment ― powered by exponential leaps in technology ― is putting cyber strategies to the test.
Organisations are confronting the new reality of a post-globalisation era, one that’s marked by fractured alliances, weakened global institutions, tariff shocks, and disrupted supply chains. Unprecedented technological advances are expanding the attack surface and introducing new cyber threats. And with this uncertainty, executives are reassessing their capabilities, as well as talent and technology more critically, and revisiting their cyber strategies, including where they operate and with whom they do business with.
PwC’s 2026 Global Digital Trust Insights survey of 3,887 business and tech executives across 72 countries reveals how leaders are handling this era of uncertainty, where they’re falling short, and what they might do differently to better meet the challenge. Key findings from South African organisations include:
63% of South African business and tech leaders (vs 60% global, 62% Africa) rank cyber risk investment in their top three strategic priorities in response to ongoing geopolitical uncertainty.
Given the current geopolitical landscape, South African organisations report stronger “very capable” ratings than global/Africa peers for core controls. However, only 6% feel “very capable” against supply chain vulnerabilities (vs 43% global, 48% Africa), highlighting a critical gap.
Only 28% of South African organisations are spending significantly more on proactive measures (e.g., monitoring, assessments, testing, controls) than reactive measures (incident response, fines, recovery). That’s the ideal spend ratio. Most local companies are in-line with global counterparts (67%) and are spending roughly equal amounts on both categories, which can be more costly and risky.
Agentic AI ranks among the top AI security capabilities that organisations globally are prioritising over the next 12 months. In South Africa, the leading area for AI adoption is identity and access management, with plans to deploy agentic AI for cloud security, data protection and cyber defence operations, among other key areas.
Although quantum computing ranks among the top five threats that organisations globally feel least prepared to address—alongside cloud-related threats, attacks on connected products, third-party breaches, and software supplychain compromises—fewer than 9% of South African organisations prioritise it in their budgets. Around 25% are piloting or testing quantum-resistant measures, and another 25% are actively implementing them. These figures are comparable to global averages and ahead of Africa, yet overall readiness remains low, underscoring the urgency for more proactive investment and strategic planning across all emerging threat areas.
Skills shortages remain one of the biggest barriers to cyber progress. Majority of South African organisations (72%) are prioritising AI and machine learning tools to help close capability gaps, and specialised managed services are becoming strategic accelerators to provide expertise and scale.
Meeting the moment will require renewed urgency, creativity and different approaches, not a business-as-usual mindset. Our C-suite playbook translates this year’s findings into practical steps, helping key stakeholders strengthen their foundational security practices and implement future-ready measures calibrated to the evolving world we’re in. Contact us should you want to explore the findings in more detail.
Junaid Amra
Cybersecurity and Forensics Technology Solutions Leader, PwC South Africa
Tel: +27 (0) 82 953 9325