NEC XON: AI Forces Rethink of African Business’ Cybersecurity
African organisations risk falling behind global counterparts as artificial intelligence reshapes cyber defence, warns NEC XON.
The company argues that many organisations on the continent are retrofitting AI into legacy cyber security architectures instead, rather than of redesigning their environments with AI as the foundational layer.
This distinction – migration versus transformation – will help determine whether African businesses can keep pace with rapidly advancing markets such as the United States.
Armand Kruger, Head of Cyber Security at NEC XON, says the prevailing approach treats AI as an add‑on rather than a catalyst for rethinking how cyber security should operate.
“While incremental improvements are possible through migration, they fall short of the full potential AI can unlock through fundamental redesign,” he says. “You can add an AI capability to a legacy security architecture and gain efficiencies, but you will remain limited by the inherent capabilities of the systems you’re bolting the AI onto. What organisations need is to redesign the model with AI as the foundation, not just another capability.”
From Retrofitting to Rebuilding
For decades, cyber security environments have been built as collections of specialised technologies, with SIEM platforms acting as central aggregation points for alerts and telemetry.
AI is increasingly being layered onto these systems to improve detection, automate workflows and reduce alert volumes.
But Kruger argues that this approach is inherently limited because it places AI at the top of a pyramid built on legacy assumptions.
“Flip the model upside down. Put AI at the foundation and build your capabilities above it. Suddenly you have a platform for a new era of cyber security.”
This shift – from retrofitting AI to rebuilding around it – is already underway in advanced markets.
NEC XON has engaged with US organisations that are advising customers to construct entire cyber security strategies around AI-first architectures.
African organisations must begin redesigning cyber security environments to avoid a widening innovation gap, in Kruger’s view.
A Strategic Risk for African Competitiveness
The implications extend beyond technology competitiveness.
Cyber security is fundamentally tied to business resilience.
Falling behind in the ability to detect, understand and respond to increasingly sophisticated attacks could leave organisations exposed as adversaries adopt AI-driven techniques.
Kruger notes that attackers are already using AI to build graphs that map potential attack paths and identify weaknesses across interconnected systems.
“If we don’t use AI to build these graphs and attackers start using AI, they’re going to be miles ahead of us.”
Transforming the SOC: A Customer Example
An AI-first architecture also transforms the role of the security operations centre (SOC).
Traditional SOCs are overwhelmed by alert volumes, forcing analysts to spend most of their time triaging signals.
AI can analyse thousands of alerts, identify relationships between them and reduce the number of incidents requiring human investigation.
In one NEC XON customer’s environment, approximately 1,000 alerts were processed by an AI engine and reduced to just 17 actionable incidents.
The value, Kruger emphasises, is not merely fewer alerts but the ability to redeploy cyber security expertise.
“AI isn’t necessarily going to replace cyber security expertise. It changes how that expertise is applied.”
Instead of spending 80-90% of their time on repetitive tasks, skilled professionals can focus on architectural analysis, business risk, proactive threat hunting and innovation.
This shifts the SOC’s role from reactive alert management to strategic engagement with the business around resilience and future planning.
Cyber Resilience as the Ultimate Goal
Kruger stresses that AI is not the end goal; cyber resilience is. “Cyber resilience needs to be the top of the pyramid. AI is the accelerator that gets you there.”
Organisations should therefore stop asking which existing products can be enhanced with AI and instead ask what their architecture would look like if AI were the foundation.
Transformation does not require abandoning existing technology overnight.
Most organisations have complex environments and significant investments in current infrastructure.
The starting point is a new strategic vision: define the desired AI-first architecture, assess the current stack and determine where AI-driven capabilities can progressively replace or consolidate legacy technologies.
Lessons from Cloud Transformation
Kruger cites a leading financial services client’s cloud strategy as an example of transformation versus migration.
Rather than lifting and shifting existing systems into the cloud, the company redesigned its architecture around cloud-native capabilities, achieving agility that would not have been possible through simple migration.
The same principle, he says, now applies to cyber security.
Ultimately, the issue extends beyond the cyber security function.
As AI becomes embedded in both offensive and defensive cyber capabilities, the ability to redesign security around AI will influence competitiveness and resilience across the business.
“The message is that AI is not the capability. AI is the foundation,” Kruger says. Organisations that act early will build architectures designed around what AI makes possible, enabling higher-value work, more proactive security teams and stronger resilience against an increasingly sophisticated threat landscape.
Don’t leave your business exposed. Click here to see how NEC XON can help.
Loading ...