Bridging the gap between cybersecurity risk and awareness
February 2025
IT in Manufacturing
By Ryan Boyes, governance, risk and compliance officer at Galix.
Much like the rest of the world, South Africa grapples with challenges emanating from a digital landscape fraught with escalating cyberthreats that pose significant risks to businesses and other organisations. However, what makes the local threat landscape unique is that historically, South African organisations have placed less emphasis on security than their international counterparts. This oversight has made the country a bigger target for cybercriminals.
Cultivating a partnership with experts
In light of these challenges, implementing effective risk management strategies has become essential. Cultivating partnerships with expert third-party providers can significantly enhance an organisation’s cybersecurity posture. These providers typically offer extensive experience and resourcing, ensuring that companies benefit not only from their deep understanding of information security, but from both technological and regulatory perspectives.
Moreover, these specialist partners bring invaluable ‘admin knowledge’, encompassing a thorough understanding of compliance and documentation related to cybersecurity frameworks. The financial implications of these partnerships are also noteworthy; building an in-house team can be prohibitively expensive, especially for SMEs that often lack the necessary resources and tools.

Ryan Boyes, governance, risk and compliance officer at Galix.
Identifying vulnerabilities
Expert partnerships are crucial for conducting comprehensive risk assessments that identify vulnerabilities and prioritise threats specific to a company’s industry. In the rapidly evolving sector of information security, regular assessments and gap analyses should be standard for all organisations. An expert partner can provide an unbiased perspective on security assessments, enriched by a wealth of experience and knowledge.
Equally important is fostering a culture of cybersecurity awareness and proactive risk management throughout the organisation. This cultural shift must be driven from the top, and management plays a critical role in instilling a genuine commitment to protecting information rather than merely ticking boxes for compliance.
Unfortunately, many companies adopt a superficial approach to cybersecurity awareness, treating it as a mere formality rather than an essential mindset. Organisations must cultivate a desire to safeguard their information, which requires ensuring that employees embrace a culture focused on information security. This mindset should originate from executive leadership and permeate throughout the organisation, fostering collaboration and shared responsibility. This cultural shift will enable organisations to anticipate potential threats and respond effectively, thus minimising potential damage.
Building an awareness culture
Once companies secure buy-in from all stakeholders to develop an awareness culture alongside proactive risk management, they can leverage expert providers to address both technical and compliance aspects of their risk management strategy. While neither aspect is inherently more important than the other, they must be developed concurrently.
Subsequently, organisations should identify a framework that aligns best with their specific needs and objectives. However, implementing these systems is just the beginning as ongoing maintenance is crucial. A robust risk management strategy should encompass not only risk assessment, but also regular test scenarios to ensure that all components function effectively. Here again, a third-party perspective can serve as an unbiased reporting mechanism, ensuring that these systems remain operationally sound.
As South African organisations continue to confront escalating cyberthreats, enhancing cybersecurity measures through expert partnerships and cultivating an organisational culture centred on proactive risk management will be vital. By prioritising these strategies, businesses can better navigate the complexities of today’s digital landscape and minimise potential damage from cyberincidents.
Further reading:
Even in autonomous systems, human insight is important
Schneider Electric South Africa
IT in Manufacturing
As AI, IIoT and digital twins reshape industrial operations, Schneider Electric’s Kobus Vermeulen and Bafana Msibi argue that the operator’s role is shifting from controlling equipment to interpreting intelligence, validating AI recommendations and making decisions that improve
Read more...
AI-based quality inspection scales across P&G operations
Siemens South Africa
IT in Manufacturing
Siemens and Procter & Gamble are expanding an AI-based visual inspection system across P&G’s manufacturing operations worldwide, inspecting products in real time at full line speed, and reducing scrap rates by 10 to 20% depending on the product.
Read more...
How sustainability unlocks real business impact
Rockwell Automation
IT in Manufacturing
Sustainability has moved from a compliance obligation to a strategic driver of resilience and value for manufacturers. Rockwell Automation explains how its Triple A framework and connected-data approach help producers cut energy, water and waste while improving productivity.
Read more...
Mining’s AI future will depend on people as well as technology
IT in Manufacturing
South Africa’s mining industry is embracing digitalisation and AI, but AvenirHoldings chief executive officer, Tshidi Mndzebele says the real test is whether the people behind the industry are equipped to move forward with it, and outlines five things mining needs to get right.
Read more...
How BIC overcame operational silos to integrate technology and people
Rockwell Automation
IT in Manufacturing
Manufacturing giant BIC deployed Plex MES from Rockwell Automation at its Bizerte plant in Tunisia, replacing fragmented, partly in-house software with a single cloud-based execution system that broke operational silos and improved shop-floor visibility.
Read more...
AI in industry is an early warning system, not a guarantee
Schneider Electric South Africa
IT in Manufacturing
Schneider Electric’s Paul Steyn argues that AI in industrial maintenance is only as good as the infrastructure and people behind it, and explains the three layers a facility needs before predictive maintenance can deliver on its promise.
Read more...
SA’s mining industry must put people at the heart of its digital future
IT in Manufacturing
South Africa’s mining industry employs around 470 000 people while its digital transition accelerates. Avenir’s chief executive officer, Tshidi Mndzebele argues that technology should enable and upskill the workforce rather than replace it, setting out five ways mining can make technology work for its people.
Read more...
Quality control supports efficient tissue production
Valmet South Africa
IT in Manufacturing
Valmet’s advanced quality control technology is helping tissue producers improve product consistency while reducing energy and raw material consumption. Its latest installation at KORO Paper in Vietnam combines real-time measurement, process optimisation and non-contact, nuclear-free quality control.
Read more...
Patented algorithm maximises operator efficiency
Rockwell Automation
IT in Manufacturing
Rockwell Automation piloted a patented anomaly detection algorithm and FactoryTalk DataMosaix at its Twinsburg electronics plant, giving operators 30 to 60 days’ advance warning of stencil failure, improving fail rates by 22% and achieving a 200% return on investment.
Read more...
Cybersecurity must become part of the next era of industrial automation
Adroit Technologies
IT in Manufacturing
The EU’s Cyber Resilience Act is setting a global benchmark for connected products, making cybersecurity a core engineering requirement in industrial automation. Adroit Technologies and Mitsubishi Electric explain how building security into controllers, PLCs and drives from the outset helps South African manufacturers protect production and meet international expectations.
Read more...