What Is Cybersecurity?
Before you can protect yourself or your organisation, you need to understand what you're protecting against, and why it matters more in 2026 than ever before.
Cybersecurity is the practice of protecting computers, networks, applications, and data from digital attacks, unauthorised access, damage, or theft. It covers everything from the password on your phone to the systems that keep hospital records private to the infrastructure that keeps financial transactions flowing.
Think of it like physical security for your home, locks on the doors, lights outside, a safe for valuables, but applied to the digital world. The difference is that a physical burglar has to be physically present. A cybercriminal can attack you from anywhere on earth, at any time, without you ever seeing them.
Why Africa Is on the Front Line
Africa's rapid digital adoption has created enormous opportunity, and equally enormous risk. Mobile money, digital banking, e commerce, and cloud based business tools have brought millions into the formal economy. But the same platforms that enable that growth are also targets.
These numbers are not meant to frighten you, they are meant to motivate you. The organisations and individuals who understand cybersecurity basics are dramatically less likely to become victims. Knowledge is the most effective defence.
What Cybersecurity Actually Protects
Your money. Bank accounts, mobile money wallets, investment accounts, all of these are targets. Your identity. National ID numbers, passport details, and biometric data can be used to commit fraud in your name. Your business. Customer data, trade secrets, financial records, and operational systems. Your reputation. A breach that exposes customer data can destroy trust that took years to build.
Cybersecurity is not just an IT issue, it is a personal safety issue, a business continuity issue, and a national security issue. Everyone who uses a phone, laptop, or internet connection is both a potential target and a potential line of defence.
Quick Check, Module One
Answer these questions to confirm you've got the core ideas. You need 2 out of 3 to proceed.
The Cyber Threat Landscape
Attackers have dozens of tools at their disposal. Understanding the most common ones, and how they work, is the first step to recognising and stopping them.
Phishing, The Most Common Attack
Phishing is when an attacker pretends to be someone you trust, a bank, a company, or a friend, to trick you into revealing passwords, PINs, or personal information. It is the starting point for most major cyber incidents worldwide.
Types of Threats You Will Encounter
Phishing
Fake messages mimicking trusted organisations to steal credentials or money.
Malware
Malicious software installed on your device to spy, steal, or cause damage.
Ransomware
Malware that encrypts your files and demands payment to restore access.
Social Engineering
Psychological manipulation to make people reveal information or take actions.
SIM Swapping
Convincing your network provider to move your number to an attacker's SIM.
Man-in-the-Middle
Intercepting communications between two parties without their knowledge.
How Ransomware Destroyed a Hospital
In 2020, Life Healthcare Group, one of South Africa's largest private hospital networks, was hit by a ransomware attack. Patient records, admission systems, and business processing systems were encrypted. Operations had to revert to pen and paper. The attack disrupted care across multiple facilities and took weeks to recover from.
Ransomware attackers increasingly target African healthcare, financial services, and government institutions. Any organisation that holds valuable data is a target, not just large corporations.
The Social Engineering Playbook
Social engineering does not require technical skill. It requires psychology. Attackers exploit urgency (act now before your account closes), authority (I am calling from your bank), fear (your account has been compromised), and reciprocity (someone sent you money by mistake). Recognising these triggers is the most powerful defence against them.
Quick Check, Module Two
Test your understanding of cyber threats.
The CIA Triad, The Foundation of Security
Every security decision in cybersecurity traces back to three core principles. Understanding them gives you a framework for evaluating any security situation.
Confidentiality
Information is only accessible to those with permission. Your bank balance should only be visible to you and authorised bank staff, not to anyone who wants to look.
Integrity
Information is accurate and has not been tampered with. When you check your account balance, you need to trust that the number shown has not been altered by an attacker.
Availability
Systems and data are accessible when needed. A hospital's patient records must be available 24/7, an attack that makes them inaccessible during an emergency has the same impact as a physical attack.
CIA in Everyday Life
When you send money via mobile money, all three apply simultaneously. Confidentiality: only you and the recipient should know the transaction details. Integrity: the amount sent must be exactly what you entered, not altered in transit. Availability: the service must be accessible when you need to make an urgent payment.
When attackers breach these principles, the consequences are concrete. A confidentiality breach exposes your private data. An integrity breach changes your records without your knowledge. An availability attack (called a Denial of Service attack) prevents you from accessing your accounts or services entirely.
When evaluating any security decision, ask: Does this protect confidentiality? Does this ensure integrity? Does this support availability? If any answer is no, there is a gap to address.
Quick Check, Module Three
Passwords and Authentication
Stolen credentials are the entry point in 22% of all confirmed breaches. Your password is the first line of defence, and for most people, it is dangerously weak.
Why Most Passwords Fail
A study of 19 billion leaked passwords from 2024 and 2025 found that only 6% were unique, meaning 94% of people are reusing passwords across multiple accounts. When one account is breached, every account with the same password is immediately at risk.
The Password Manager Solution
A password manager is a secure digital vault that generates and remembers unique, strong passwords for every account. You remember one master password, the manager handles the rest. People who use password managers experience identity theft at roughly half the rate of those who don't.
Free options to start: Bitwarden (fully free, open source, highly trusted), Google Password Manager (built into your Google account), Apple Keychain (built into Apple devices).
multi factor Authentication (MFA)
MFA adds a second verification step beyond your password, something you have (your phone) or something you are (your fingerprint). Microsoft's research shows that MFA blocks over 99% of identity-based attacks, even when the attacker already has your correct password.
Your email is the master key, it can reset every other account. Protect it first.
Any account connected to money is a priority target.
Authenticator apps (Google Authenticator, Microsoft Authenticator) are more secure than SMS codes, which can be intercepted via SIM swap.
When you enable MFA, you'll receive backup codes. Print them and store them somewhere physically safe.
Quick Check, Module Four
Safe Browsing and Online Habits
Your daily online behaviour, how you browse, what you click, where you connect, determines your risk more than any software you install.
HTTPS, The Basics
When a website address starts with https:// and shows a padlock, communication between your device and that site is encrypted. An attacker on the same network cannot read the data in transit. When you see http:// (no S), treat everything you type on that page as potentially visible to others.
However, HTTPS only means the connection is encrypted, it does not mean the website itself is safe or legitimate. Phishing sites use HTTPS too.
Spotting Fake Websites
Attackers create websites that look identical to the real thing. Always check the full domain name in your browser's address bar, not just the padlock. The difference between safaricom.co.ke and safar1com.co.ke or safaricom support.com is easy to miss when you're moving quickly.
Public Wi-Fi Risks
Free Wi-Fi in cafes, hotels, airports, and shopping centres is convenient, and potentially dangerous. An attacker on the same network can potentially intercept unencrypted data. Never access banking, mobile money, or sensitive accounts on public Wi-Fi without a VPN.
A VPN (Virtual Private Network) encrypts all traffic from your device, even on public networks. Free options include Proton VPN (genuinely free, reputable). Paid options offer better speed and reliability.
Safe Download Habits
Only download software and apps from official sources, the Google Play Store, Apple App Store, or the software developer's official website. Never install an app sent via WhatsApp, SMS, or email, even from someone you know, their account may have been compromised.
Quick Check, Module Five
Device and Mobile Security
Your smartphone is your wallet, your ID, your bank, and your communication hub. It is also one of the most valuable targets for attackers.
Keep Software Updated
Software updates are not just about new features, they patch security vulnerabilities that attackers are actively exploiting. When your phone or laptop shows an update notification, do not delay it. Set devices to update automatically wherever possible.
App Permissions
When you install an app, it may request access to your contacts, camera, microphone, location, or storage. Not all of these requests are legitimate. A flashlight app that requests access to your contacts is a red flag. Review permissions before accepting, and periodically audit which apps have access to what on your device.
Lock Screen and Encryption
Enable a PIN, password, or biometric lock on every device. Enable full-device encryption (most modern smartphones do this by default when a lock screen is set). If your phone is stolen with no lock screen, every account on it is immediately accessible.
What to Do If Your Phone Is Lost or Stolen
Especially email and mobile money, from another device.
Request your SIM be locked to prevent SIM swap attacks while you're vulnerable.
Google (Android) and Apple (iOS) both offer remote location, lock, and erase features.
Get a police abstract, you'll need it for insurance and to dispute any fraudulent transactions.
Quick Check, Module Six
Data Protection and Privacy
Your personal data is valuable, to you, to businesses, and to criminals. Understanding how it is collected, used, and protected helps you make better decisions about what you share and with whom.
Why Your Data Has Value
Your name, ID number, date of birth, phone number, location history, and browsing habits can be combined to build a profile that enables targeted attacks, financial fraud, or identity theft. Data brokers buy and sell this information legally. Criminals steal it illegally.
The Kenya Data Protection Act 2019
If you operate a business in Kenya or handle Kenyan residents' data, you are subject to the Kenya Data Protection Act. Key obligations include: obtaining consent before collecting personal data, telling people why you need their data, keeping it secure, and deleting it when it is no longer needed. Violations can result in fines of up to KSh 5 million or 3 years imprisonment for responsible officers.
Backups, The 3-2-1 Rule
The most overlooked form of data protection is a reliable backup. The 3-2-1 rule: keep 3 copies of important data, on 2 different types of storage, with 1 copy stored off-site or in the cloud. When ransomware encrypts your files, a clean backup means you can recover without paying the ransom.
Social Media Privacy
Review privacy settings on every platform. Default settings are usually the least private. Be deliberate about what personal information is publicly visible, your workplace, home area, daily routines, and family information can be used by attackers to craft convincing phishing messages or conduct physical surveillance.
Quick Check, Module Seven
When Things Go Wrong, Incident Response
Even with the best precautions, incidents happen. Knowing what to do in the first hour after a security incident can make the difference between a minor setback and a catastrophic loss.
Signs You May Have Been Compromised
Your accounts show login activity from unknown locations. Contacts report receiving strange messages from you that you didn't send. Your phone suddenly loses service without explanation. Money you didn't send appears in your mobile money transaction history. Your device is slower than usual or shows apps you didn't install.
The First Hour, What to Do
Panicked decisions make things worse. Take a breath and work through the steps below.
Take it offline (disable Wi-Fi and mobile data) to prevent further data exfiltration or spread.
Start with email, then mobile money, then banking, then everything else.
Report the incident immediately. Transactions may be reversible if reported quickly.
Screenshot suspicious messages, note dates and amounts, save transaction records.
DCI Cybercrime Unit in Kenya, INTERPOL Africa, or your national cybercrime reporting channel.
Kenya: DCI Cybercrime Unit, [email protected] · Nigeria: EFCC, efcc.gov.ng · South Africa: SAPS Cybercrime, 10111 · Ghana: Cybercrime Unit, [email protected] · International: INTERPOL, interpol.int
Final Assessment, Module Eight
Complete this final quiz to earn your certificate.
VUNVAULT Academy
has successfully completed
Cybersecurity Foundations
Awarded · VUNVAULT Academy · vunvault.com