
Premium
Dedication
1/9/2026
Acknowledgements
1/9/2026
Preface
1/9/2026
How to Use This Book
1/9/2026
Part One: Foundations
1/9/2026
Chapter 1: Africa’s OT/ICS Security Moment
1/9/2026
Section 1: The Continent at the Crossroads
1/9/2026
Section 2: What OT/ICS Is, and Why It Is Different
1/9/2026
Section 3: Africa’s Unique OT/ICS Landscape
1/9/2026
Section 4: The Threat Landscape in Brief
1/9/2026
Section 5: The Digital Transformation Imperative and Its Security Shadow
1/9/2026
Section 6: The Capacity Building Imperative
1/9/2026
Chapter 2: Understanding Your OT/ICS Environment: The African Context
1/9/2026
2.1 Defining OT/ICS: More Than Acronyms
1/9/2026
2.2 The Purdue Enterprise Reference Model in African Infrastructure
1/9/2026
2.3 OT Protocols and Their Security Implications
1/9/2026
2.4 Africa's OT Asset Lifecycle Reality
1/9/2026
2.5 Connectivity Patterns and Attack Surfaces
1/9/2026
2.6 Human Factors in African OT Environments
1/9/2026
2.7 Building the Asset Inventory: A Practical Framework
1/9/2026
2.8 The Path Forward: Building Environmental Understanding
1/9/2026
Chapter 3: Great Power Competition and Africa's Critical Infrastructure
1/9/2026
3.1 The Infrastructure Financing Landscape and Its Security Implications
1/9/2026
3.2 Intelligence Threats to African Critical Infrastructure
1/9/2026
3.3 China's Infrastructure Strategy and OT Security Implications
1/9/2026
3.4 Russia's OT Capabilities and African Interests
1/9/2026
3.5 Western Powers: Partnership and Surveillance
1/9/2026
3.6 The Submarine Cable Infrastructure: Africa's Digital Achilles Heel
1/9/2026
3.7 Developing Strategic Autonomy in Infrastructure Security
1/9/2026
3.8 Implications for OT Security Practice
1/9/2026
Chapter 4: Africa's Critical Minerals and the Nation-State Threat
1/9/2026
4.1 Africa's Critical Minerals Endowment: Strategic Overview
1/9/2026
4.2 Mining OT Architecture: Unique Security Challenges
1/9/2026
4.3 Nation-State Threat Actors Targeting Mining Sector OT
1/9/2026
4.4 Supply Chain Vulnerabilities in African Mining
1/9/2026
4.5 The Cobalt Concentration Risk and Security Implications
1/9/2026
4.6 Platinum Group Metals and South Africa's Mining Security Landscape
1/9/2026
4.7 Recommendations for Mining Sector OT Security
1/9/2026
4.8 The Resource Curse Meets the Cyber Threat
1/9/2026
Chapter 5: The African Threat Landscape Today: Actors, Campaigns, and Consequences
1/9/2026
5.1 Threat Actor Taxonomy for African OT
1/9/2026
5.2 Documented Campaigns Against African OT Infrastructure
1/9/2026
5.3 MITRE ATT&CK for ICS: Understanding Attack Techniques
1/9/2026
5.4 Ransomware: The Most Immediate Threat to African Operational Continuity
1/9/2026
5.5 Threat Intelligence for African OT: Sources and Integration
1/9/2026
5.6 Attack Path Analysis: How Adversaries Navigate African OT Environments
1/9/2026
5.7 Emerging Threats: AI-Enabled Attacks and OT-Specific Malware
1/9/2026
5.8 Building a Threat-Informed Defense: Practical Implications
1/9/2026
Chapter 6: The Digital Transformation Paradox: Connectivity, Cloud, and Expanding Risk
1/9/2026
6.1 The Industrial Internet of Things in African Infrastructure
1/9/2026
6.2 Cloud-Based SCADA and Monitoring: Benefits, Risks, and African Realities
1/9/2026
6.3 Operational Technology and Artificial Intelligence
1/9/2026
6.4 Remote Operations and the Security Implications of Workforce Mobility
1/9/2026
6.5 The Connectivity-Security Tension in Underfunded African Infrastructure
1/9/2026
6.6 Case Study: Digital Transformation Security in African Electric Utilities
1/9/2026
6.7 The 5G Transition and OT Security
1/9/2026
6.8 Managing Digital Transformation Risk: A Framework
1/9/2026
Chapter 7: Building a National OT/ICS Cybersecurity Strategy: The African Imperative
1/9/2026
7.1 The State of National OT Security Governance in Africa
1/9/2026
7.2 Legal and Regulatory Frameworks for OT Security
1/9/2026
7.3 National OT Security Strategy: Essential Elements
1/9/2026
7.4 Sector-Specific Regulatory Considerations
1/9/2026
7.5 Information Sharing: The Foundation of Collective Defense
1/9/2026
7.6 National Capacity Building: Developing the OT Security Workforce
1/9/2026
7.7 International Cooperation and African Security Sovereignty
1/9/2026
7.8 A Framework for African National OT Security Strategy
1/9/2026
Chapter 8: IEC 62443 for African OT Environments: A Practical Implementation Guide
1/9/2026
8.1 The IEC 62443 Architecture: Understanding the Standard Family
1/9/2026
8.2 Zone and Conduit Modeling for African Industrial Environments
1/9/2026
8.3 Security Management System Development: IEC 62443-2-1 in Practice
1/9/2026
8.4 Applying IEC 62443-3-3 System Security Requirements
1/9/2026
8.5 Patch Management in African OT Environments
1/9/2026
8.6 IEC 62443 for Small and Resource-Constrained African Operators
1/9/2026
8.7 Supply Chain Security Under IEC 62443-2-4
1/9/2026
8.8 Building the IEC 62443 Implementation Roadmap
1/9/2026
Chapter 9: The Regulatory Landscape: African and Global Frameworks for OT Security
1/9/2026
9.1 The African Union Cybersecurity Framework
1/9/2026
9.2 Regional Economic Community Frameworks
1/9/2026
9.3 National Regulatory Frameworks: Country Case Studies
1/9/2026
9.4 NERC CIP: Lessons from the World's Most Developed OT Security Regulatory Framework
1/9/2026
9.5 European NIS2 and Its Extraterritorial Implications for African Operators
1/9/2026
9.6 Maritime Cybersecurity: IMO Requirements for African Ports and Shipping
1/9/2026
9.7 Building Regulatory Compliance Programs for African OT
1/9/2026
9.8 Regulatory Development: Recommendations for African Policymakers
1/9/2026
Chapter 10: The Legal Architecture: Cybercrime Law, Critical Infrastructure Protection, and Regulatory Obligations Across Africa
1/9/2026
10.1 Why Legal Frameworks Matter for OT Security
1/9/2026
10.2 The Continental Legal Foundation: The AU Malabo Convention
1/9/2026
10.3 The Budapest Convention in Africa
1/9/2026
10.4 National Cybercrime Legislation: A Survey
1/9/2026
South Africa: Cybercrimes Act 19 of 2020
1/9/2026
Nigeria: Cybercrimes Act 2015, amended 2024
1/9/2026
Kenya: Computer Misuse and Cybercrimes Act 2018
1/9/2026
Ghana: Cybersecurity Act 2020 (Act 1038)
1/9/2026
10.5 Critical Infrastructure Protection Laws
1/9/2026
10.6 Mandatory Incident Reporting
1/9/2026
10.7 Operator Liability and Civil Responsibility
1/9/2026
10.8 Data Protection Laws in OT Contexts
1/9/2026
10.9 Legal Framework for Information Sharing
1/9/2026
10.10 Digital Forensics and Legal Evidence in OT Environments
1/9/2026
The OT Forensics Gap
1/9/2026
Law Enforcement Capacity
1/9/2026
10.11 International Law and State-Sponsored OT Attacks
1/9/2026
10.12 Procurement and Supply Chain Law
1/9/2026
10.13 Recommendations: Strengthening Africa's OT Legal Ecosystem
1/9/2026
For National Governments
1/9/2026
For Regional Bodies (AU, ECOWAS, SADC, EAC)
1/9/2026
For Critical Infrastructure Operators
1/9/2026
10.14 Case Study: Ghana's Cybersecurity Authority as a Model
1/9/2026
Chapter Summary
1/9/2026
Discussion Questions
1/9/2026
Key Terms
1/9/2026
Chapter 11: OT Security Risk Assessment: Methodology for African Critical Infrastructure
1/9/2026
11.1 OT Risk Assessment Frameworks: An Overview
1/9/2026
11.2 Threat Identification for African OT Environments
1/9/2026
11.3 Consequence Analysis: The African Context
1/9/2026
11.4 Likelihood Assessment in Data-Scarce African Environments
1/9/2026
11.5 Risk Evaluation and Prioritization
1/9/2026
11.6 Communicating Risk to African Leadership
1/9/2026
11.7 Maintaining Risk Assessment Currency
1/9/2026
11.8 Risk Assessment Integration with Broader Governance
1/9/2026
Chapter 12: Building the Business Case for OT Security Investment in African Organizations
1/9/2026
12.1 Understanding the African Infrastructure Investment Decision Environment
1/9/2026
12.2 Quantifying OT Risk Exposure in African Contexts
1/9/2026
12.3 Framing Security as Operational Investment, Not Compliance Cost
1/9/2026
12.4 Insurance as a Business Case Lever
1/9/2026
12.5 Regulatory Compliance as a Business Case Anchor
1/9/2026
12.6 Investment Prioritization: Getting the Most From Limited Budgets
1/9/2026
12.7 Building the Multi-Year Security Investment Program
1/9/2026
12.8 Measuring and Reporting Security Program Value
1/9/2026
Chapter 13: OT Security Architecture: Designing Resilient Industrial Networks in Africa
1/9/2026
13.1 Defense in Depth for OT: Principles and African Application
1/9/2026
13.2 Network Segmentation Strategies for African OT
1/9/2026
13.3 Secure Remote Access Architecture
1/9/2026
13.4 OT Security Monitoring Architecture
1/9/2026
13.5 Data Diodes and Unidirectional Security Gateways
1/9/2026
13.6 OT Endpoint Hardening: Practical Approaches for African Environments
1/9/2026
13.7 Architecting for Resilience: Availability and Recovery
1/9/2026
13.8 Architecture Governance: Making Good Designs Stick
1/9/2026
Chapter 14: OT Security Maturity Assessment: The African Industrial Security Maturity Model
1/9/2026
14.1 Why Maturity Models for African OT Security?
1/9/2026
14.2 AISM Capability Domains
1/9/2026
14.3 Level-by-Level Capability Criteria
1/9/2026
14.4 Conducting Third-Party AISM Assessments
1/9/2026
14.5 Benchmarking Against Sector Peers
1/9/2026
14.6 AI-Powered Security Assessment: Emerging Capabilities for African Practitioners
1/9/2026
14.7 Using Maturity Assessments for Regulatory and DFI Reporting
1/9/2026
14.8 From Assessment to Action: Developing the Improvement Roadmap
1/9/2026
Part Two: Sector Applications
1/9/2026
Chapter 15: Powering the Continent Securely: OT/ICS Cybersecurity for African Energy Utilities
1/9/2026
15.1 The African Energy Sector's OT Landscape
1/9/2026
15.2 Threat Actors Targeting African Energy Infrastructure
1/9/2026
15.3 Critical OT Components and Their Vulnerabilities
1/9/2026
15.4 Regulatory and Standards Framework for African Energy Cybersecurity
1/9/2026
15.5 Implementing IEC 62443 in African Energy Utilities
1/9/2026
15.6 Securing the Renewable Energy Transition
1/9/2026
15.7 Incident Response for Energy Utility OT Environments
1/9/2026
15.8 Building a Sustainable OT Security Program for African Energy Utilities
1/9/2026
Chapter 16: Water as Life, Water as Target: OT/ICS Cybersecurity for African Water and Wastewater Utilities
1/9/2026
16.1 Africa's Water Infrastructure OT Landscape
1/9/2026
16.2 Threat Landscape for African Water Infrastructure
1/9/2026
16.3 Safety-Critical Controls: Chemical Dosing, Disinfection, and Process Safety
1/9/2026
16.4 Securing Remote Pump Stations and Distribution Networks
1/9/2026
16.5 Wastewater and Environmental Impact: Operational and Reputational Risk
1/9/2026
16.6 Regulatory Framework and Compliance for African Water Utilities
1/9/2026
16.7 Capacity Building and the Small Utility Challenge
1/9/2026
16.8 The Ubuntu Vision for African Water Security
1/9/2026
Chapter 17: Black Gold, Digital Vulnerabilities: OT/ICS Cybersecurity for Africa's Oil and Gas Sector
1/9/2026
17.1 Africa's Oil and Gas OT Landscape
1/9/2026
17.2 The TRITON/TRISIS Watershed: OT Safety System Attacks in Oil and Gas
1/9/2026
17.3 Offshore Platform OT Security
1/9/2026
17.4 Pipeline SCADA Security: The Colonial Pipeline Lesson and African Context
1/9/2026
17.5 Refinery and Gas Processing OT Security
1/9/2026
17.6 LNG Security: Africa's Most Complex OT Environments
1/9/2026
17.7 Supply Chain Security in African Oil and Gas
1/9/2026
17.8 The Strategic Imperative: Protecting Africa's Petroleum Revenue Foundation
1/9/2026
Chapter 18: The Earth's Wealth, the Hacker's Target: OT/ICS Cybersecurity for African Mining
1/9/2026
18.1 The African Mining OT Ecosystem
1/9/2026
18.2 Threat Actors and Motivations in African Mining
1/9/2026
18.3 Underground Mine Safety Systems and OT Security Intersections
1/9/2026
18.4 Autonomous Mining and OT Security: The New Frontier
1/9/2026
18.5 Tailings Management Systems: The Environmental Safety Intersection
1/9/2026
18.6 Small-Scale and Artisanal Mining: A Different Security Conversation
1/9/2026
18.7 Implementing OT Security in African Mining Operations
1/9/2026
18.8 The Ubuntu Imperative: Mining's Social Licence and Cyber Security
1/9/2026
Chapter 19: The Arteries of Commerce: OT/ICS Cybersecurity for African Transportation and Ports
1/9/2026
19.1 African Transportation OT: A Sector Overview
1/9/2026
19.2 The NotPetya Lesson for African Ports
1/9/2026
19.3 Rail Signalling and Train Control OT Security
1/9/2026
19.4 Aviation OT Security: ATC, Navigation, and Ground Systems
1/9/2026
19.5 Port Cybersecurity: The Maritime-OT Nexus
1/9/2026
19.6 Road Network and Intelligent Transport Systems Security
1/9/2026
19.7 Multi-Modal Coordination and the Supply Chain Security Imperative
1/9/2026
19.8 Connecting the Continent Securely: The Ubuntu Vision for Transportation
1/9/2026
Chapter 20: The Invisible Infrastructure: OT/ICS Cybersecurity for African Telecommunications
1/9/2026
20.1 The Architecture of African Telecommunications OT
1/9/2026
20.2 Threat Actors Targeting African Telecommunications
1/9/2026
20.3 Core Network OT Security: 5G and Network Slicing
1/9/2026
20.4 Submarine Cable Security: Protecting Continental Connectivity
1/9/2026
20.5 Data Center OT Security: Protecting Africa's Digital Backbone
1/9/2026
20.6 Securing the Tower: Base Station Energy and Remote Management Security
1/9/2026