Africa Cybersecurity Resource Center

What Africa Cybersecurity Resource Center does

Africa Cybersecurity Resource Center (ACRC) is a not-for-profit consortium established under Senegalese law as a single-member private limited company (SUARL) headquartered in Dakar, with a mandate to protect the African financial sector and its customers from cyber threats. The organization was launched in March 2021 by a founding consortium composed of SECURITYMADEIN.LU (Luxembourg's national cybersecurity agency), the SnT Interdisciplinary Centre of the University of Luxembourg, Excellium Services (part of Maxive), and Suricate Solutions (West Africa-based cybersecurity specialist in Senegal), with initial grant funding of USD 2 million from the African Development Bank channeled through the Africa Digital Financial Inclusion Facility (ADFI). Its mission targets 2,000–3,000 financial institutions across Sub-Saharan Africa and the protection of roughly 250 million vulnerable customers, with explicit gender-inclusion targets (20–25 million women and a 39%+ female workforce).

ACRC's platform is organized around five integrated service lines: Information Sharing and Analysis Centre (ISAC), Cybersecurity Capacity Building (CCB), Computer Security Incident Response Team (CSIRT), Strategic and Regulatory Advisory Services (SRA), and Research, Development and Innovation (RDI). The ISAC is built on the open-source MISP threat-intelligence platform and operates through country chapters, with Senegal formally launched in February 2023 alongside named anchor institutions including Credit Mutuel du Senegal, Banque de l'Habitat du Senegal, Bank of Africa Senegal, and BDK Senegal. Two named sub-brands extend the service surface: FitCyber4Africa, a free online cybersecurity self-assessment tool for SMEs, microfinance institutions and fintechs, and ROOM#42, a crisis-management simulation environment adapted from the Luxembourg House of Cybersecurity.

Operationally, ACRC runs a consortium-delivered GTM model combining enterprise field sales with a community-led motion. Services are delivered through partnerships with professional associations (APSFD Senegal, APBEF Senegal, Sen Fin-Tech, AAS Insurance), academic institutions (ESP Dakar, SnT), and the four founding consortium members, supported by sub-regional offices planned for French-speaking West Africa, English-speaking West Africa, and English-speaking East Africa. The revenue model is a hybrid of project and grant funding (AfDB/ADFI grant plus EUR 4 million Luxembourg support to the ADFI trust fund since 2018) and subscription-style service fees from ISAC membership, capacity-building programs, CSIRT services and advisory mandates; FitCyber4Africa is offered free of charge. Leadership is consortium-driven, with Pascal Steichen (CEO of Luxembourg House of Cybersecurity) as Consortium President, Christophe Bianco (CEO Excellium Services) as Vice President, and Jean-Louis Perrier as Program Director. ACRC was selected as one of 30 projects from 900 applicants to the Paris Peace Forum 2021.

Name

Africa Cybersecurity Resource Center

Legal name

Africa Cybersecurity Resource Center SUARL

Website

https://cyber4africa.org

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

Africa Cybersecurity Resource Center (ACRC) is a Dakar-based not-for-profit consortium delivering ISAC threat-intelligence sharing, CSIRT incident response, capacity building, regulatory advisory, and R&D services to banks, microfinance, fintechs, and regulators across Sub-Saharan Africa.

Ownership category

akta.pro rank

Product category

Financial Sector Cybersecurity Services

akta.pro primary industry

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)

akta.pro secondary industries

Governance, Risk & Compliance (GRC) Managed Services (BPAEADAJ), Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Governance, Risk & Compliance (GRC) & Security Management (EDAOAIAG), Compliance Technology, GRC Platforms & Controls Automation Advisory (BPAHAFAO)

Keywords

• Financial sector cybersecurity
• Threat intelligence sharing
• Incident response services
• Cybersecurity capacity building
• Regulatory advisory services

Headquarters

HQ city

Dakar

HQ country

Senegal

HQ region

Africa

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Grant Funding: ACRC is a not-for-profit consortium. Initial and ongoing funding comes from grants. The African Development Bank provided a USD 2 million grant through the Africa Digital Financial Inclusion Facility (ADFI). Luxembourg Ministry of Finance has supported ADFI trust fund with EUR 4 million since 2018.
2. Service Fees: Comprehensive range of innovative services delivered to address all aspects of strengthening the cybersecurity ecosystem: ISAC membership, capacity building programs, CSIRT services, strategic advisory, and R&D collaboration. Some services are free (FitCyber4Africa self-assessment) while others are provided to member institutions.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

Africa Cybersecurity Resource Center (ACRC) is a not-for-profit consortium that delivers five interconnected cybersecurity service lines to the African financial sector: an Information Sharing and Analysis Centre (ISAC), Cybersecurity Capacity Building (CCB), a sub-regional Computer Security Incident Response Team (CSIRT) network, Strategic and Regulatory Advisory Services (SRA), and Research, Development and Innovation (RDI). These services are bundled with two flagship tools — FitCyber4Africa (a free online self-assessment tool for SMEs, microfinance institutions and fintechs) and ROOM#42 (a cyber-attack and crisis-management simulator) — and target banks, microfinance institutions, insurance, fintechs, telecom operators, central banks, regulators and supervisors across Sub-Saharan Africa.

Product overview

Africa Cybersecurity Resource Center (ACRC) is a not-for-profit consortium-based organization offering an integrated platform of five interconnected cybersecurity service modules: the Information Sharing and Analysis Centre (ISAC) as the core component for threat intelligence sharing, Cybersecurity Capacity Building (CCB) for training and awareness, Computer Security Incident Response Team (CSIRT) for incident management, Strategic and Regulatory Advisory Services (SRA) for policy guidance, and Research Development and Innovation (RDI) for academic partnerships. These core services are complemented by FitCyber4Africa, a free online self-assessment tool for SMEs and microfinance institutions, and ROOM#42, a crisis simulation training environment. The organization operates as a membership-based resource center connecting financial institutions across Africa with cybersecurity expertise.

Differentiator

Problem solved

Functional benefit

Brands

• FitCyber4Africa: Free online cybersecurity self-assessment tool designed to help small and medium enterprises, microfinance institutions, and fintechs assess their cybersecurity maturity, understand multiple dimensions of cybersecurity, and elaborate action plans.
• ROOM#42

Products and services

• Information Sharing and Analysis Centre (ISAC) Africa-wide information-sharing centre that enables financial institutions to exchange sensitive and timely threat information through trusted networks, an automated Open Source Threat Intelligence Platform (MISP) for sharing Indicators of Compromise, technical conferences, workgroups, and exchanges with other intelligence communities at international, continental, regional and local levels.
• Cybersecurity Capacity Building (CCB) Wide range of cybersecurity awareness and training programmes delivered online and on-site to financial sector professionals, including crisis simulation room management and gender-gap-bridging programmes to develop the African cybersecurity talent pipeline.
• Computer Security Incident Response Team (CSIRT) Unique network of sub-regional CSIRTs dedicated to the Financial Sector delivering cybersecurity incident management services with high-level skills, proximity and reactivity, including forensic investigations, detection rule development, incident response process training, and linkage to a Security Operation Centre (SOC).
• Strategic and Regulatory Advisory Services (SRA) Advisory services providing insights on cybersecurity posture, regulation implementation, training, and analysis of the impact of new technologies (AI, blockchain, Digital Financial Services) on regulations for Central Banks and Supervisors.
• Research, Development and Innovation (RDI) Academic partnership programme in education and research with universities to develop cybersecurity curricula, train PhD teachers and researchers, support MSc development in cybersecurity, and encourage research in the field across Africa.
• FitCyber4Africa Free, online, anonymous cybersecurity self-assessment tool designed for SMEs, microfinance institutions and fintechs that helps users assess their current cybersecurity maturity, understand multiple dimensions of cybersecurity, and elaborate a first-level action plan.
• ROOM#42 Cyber-attack simulator and crisis-simulation training room designed to prepare management teams, team leaders and non-technicians for cyber crisis management through preliminary briefing, hands-on simulation/exercise, and expert-led debriefing sessions.

Quantifiable outcome

• 250 million vulnerable customers to benefit from improved cybersecurity protection
• +3 more outcomes

Named customers4 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Seven partnerships are on record, tiered core and flagship.

• Luxembourg House of CybersecuritycoreStrategic or Co-development Partner · 23 February 2023CEO Pascal Steichen serves as ACRC consortium President. Hosts ROOM#42 crisis simulation program that ACRC is adapting for Dakar.
• APSFD Senegal - Professional Association of Microfinance in SenegalflagshipStrategic or Co-development Partner · 22 February 2023Partnership agreement signed Feb 22, 2023 during Luxembourg official mission in Senegal. Aims to increase cybersecurity awareness and capacity among APSFD Senegal members from Tier I to Tier III institutions. Protects hundreds of MFI and millions of consumers in West Africa against cyber threats. Signed by Executive Director Sidy Lamine Ndiaye and ACRC consortium President Pascal Steichen in presence of Prince Guillaume of Luxembourg.
• ESP Ecole Supérieure Polytechnique de DakarflagshipStrategic or Co-development Partner · 22 February 2023Partnership agreement signed Feb 22, 2023 during Luxembourg official mission. Dedicated to increase collaboration on Education, Research and Development in cybersecurity, including promoting role of women. ACRC contribution managed by Professor Tegawendé Bissyandé from SnT. ESP is part of Cheikh Anta Diop University with 100+ teacher-researchers including 20+ in ICT and cybersecurity.
• SECURITYMADEIN.LUcoreStrategic or Co-development Partner · 21 March 2021Cybersecurity Agency for the Luxembourg Economy and Municipalities. Lead consortium partner providing cybersecurity expertise and development cooperation support. Press release released by SECURITYMADEIN.LU.
• SnT - Interdisciplinary Centre for Security, Reliability and Trust, University of LuxembourgcoreStrategic or Co-development Partner · 21 March 2021Cybersecurity Research Centre of the University of Luxembourg. Provides academic expertise, R&D capabilities, and representation through Professor Tegawendé Bissyandé.
• Excellium Services SAcoreStrategic or Co-development Partner · 21 March 2021Cybersecurity leader in Luxembourg, part of Maxive (one of the largest European players). CEO Christophe Bianco serves as ACRC consortium Vice President.
• Suricate SolutionscoreStrategic or Co-development Partner · 21 March 2021Leading cybersecurity specialist in West Africa based in Senegal with several years of experience in cybersecurity for financial inclusion, particularly in Security Operations. Partner in hiring for cybersecurity positions in Dakar.

Scale indicators9 records

Recent moves8 records

Expansion highlights5 records

Direct peers

• FS-ISAC (Financial Services Information Sharing and Analysis Center): The global financial-sector ISAC that ACRC's Africa ISAC explicitly mirrors. Directly comparable on threat-intelligence sharing mission, member-based model, and focus on financial institutions — ACRC is the regional/continental analog for Africa.
• AfricaCERT: Pan-African association of national CSIRTs. Comparable as a continent-level coordination body for cybersecurity incident response and capacity building across African countries.

Emerging players

• Global Cyber Alliance (GCA): Nonprofit, international, cross-sector initiative to reduce cyber risk. Comparable as a mission-driven, consortium-style organization building practical tools and partnerships, though broader than ACRC's financial-sector focus.
• Cybastion: Africa-focused cybersecurity advisory firm with government and financial-sector clients. Comparable as a private-sector African cybersecurity provider competing for similar customers in financial inclusion and regulatory advisory.
• Serianu Limited: Africa-based cybersecurity services and consulting firm producing the annual Africa Cybersecurity Report. Comparable as an African cybersecurity capacity builder and advisor to financial institutions and regulators.

Broad incumbents

• Center for Internet Security (CIS): Established nonprofit providing cybersecurity best practices, controls, and threat intelligence for organizations and governments. Comparable on nonprofit GRC/threat-intel orientation, though with a much larger footprint and broader scope.
• KPMG Cyber Risk Services: Global advisory firm's cybersecurity practice offering GRC advisory, assessments, and incident response. Comparable on GRC advisory and assessment capabilities sold into banks and financial regulators in Africa.
• Deloitte Africa Cyber Risk: Big Four advisory cyber practice with strong African presence. Comparable on GRC advisory, regulatory support, and CSIRT/incident response services delivered to financial institutions across multiple African jurisdictions.

Regional players

• ENISA (European Union Agency for Cybersecurity): EU-level cybersecurity agency that supports member states with capacity building, CSIRTs, and regulatory advisory. Functionally analogous to what ACRC aspires to build at the African regional level, especially for the SRA service line.

Others

• FIRST (Forum of Incident Response and Security Teams): Global association of CSIRTs and incident response teams. Comparable as an ecosystem/standards body that ACRC's CSIRT network plugs into and whose membership model shapes ACRC's CSIRT service design.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Africa Cybersecurity Resource Center