C3SA_UCT

What C3SA_UCT does

Cybersecurity Capacity Centre for Southern Africa (C3SA) is an academic research center hosted by the University of Cape Town (UCT) that operates as a consortium between Research ICT Africa (RIA), the UCT Department of Information Systems, the Global Cyber Security Capacity Centre (GCSCC) at the University of Oxford, and the Norwegian Institute of International Affairs (NUPI). Founded in 2022, C3SA functions as the African regional node of a global constellation of cybersecurity capacity research centres alongside GCSCC and the Oceania Cyber Security Centre (OCSC). The center applies the Cybersecurity Maturity Model for Nations (CMM) developed at Oxford to evaluate national cybersecurity resilience, delivers hands-on technical training (notably DNS Resilience Training covering DNSSEC implementation and attack simulations), and develops context-specific frameworks such as the Cybersecurity for Marginalised Schools (Cy4MaS) model for underserved educational institutions.

C3SA's portfolio spans assessment services, training programs, research publications, a webinar series, the annual Global Constellation conference, and the Cyber 9/12 Strategy Challenge competition for students. Its target audiences include national government departments responsible for cybersecurity capacity across the SADC region and beyond (Lesotho, Chad, Uganda, Seychelles, Somalia), regional and international intergovernmental organizations (SADC, AUDA-NEPAD, ITU), educational institutions in rural and disadvantaged areas of South Africa, telecommunications and internet service providers, and private sector organizations seeking cybersecurity skills development. The center has conducted CMM reviews covering 16 SADC member states and additional African countries, trained 30+ ICT professionals in DNS resilience in Lesotho, and attracted 40 students from 8 African countries to the 2024 Cyber 9/12 competition.

The business model is grant-funded rather than revenue-generating in the traditional commercial sense. Funding sources identified include the National Research Foundation (NRF) of South Africa, the World Bank, the UK Government, the Norwegian Government, and ICANN, with FY26 awards also involving CISPA and WITS. Training programs and educational resources are delivered free of charge to participants. Go-to-market is primarily event-driven and community-led, relying on conferences, workshops, training programs, webinars, and competitions to reach governments, researchers, policymakers, and educational institutions. Pricing is structured as freemium, with no disclosed fees for capacity-building services to African governments or learners.

Name

C3SA_UCT

Legal name

Cybersecurity Capacity Centre for Southern Africa

Website

https://c3sa.uct.ac.za

Company type

Private

Founded year

2022

Operating status

Operating

Headcount range

1–10 employees

Ownership category

akta.pro rank

Product category

Cybersecurity Research and Capacity Building Services

NAICS

Scientific Research and Development Services (5417)

SIC

Services-Business Services, Nec (7389)

akta.pro primary industry

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

akta.pro secondary industries

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH), Cybersecurity (EDAAAPAC)

Keywords

• Cybersecurity capacity building
• Cybersecurity maturity assessments
• DNS resilience training
• Cybersecurity policy research
• Cyber safety frameworks

Headquarters

HQ city

Cape Town

HQ country

South Africa

HQ region

Africa

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Research Grants and Funding: C3SA is funded through grants from organizations including the National Research Foundation (NRF), World Bank, UK Government, Norwegian Government, and ICANN. The center conducts research projects funded by these organizations.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels8 records

Core offering

C3SA (Cybersecurity Capacity Centre for Southern Africa) is an academic research centre hosted by the University of Cape Town that conducts cybersecurity capacity building for African governments, regulators, educational institutions, and ICT professionals. Its core offerings include Cybersecurity Maturity Model (CMM) national assessments, hands-on DNS Resilience Training, the Cy4MaS framework for schools, the DNS Abuse Project for SADC, and the Cyber 9/12 Strategy Challenge for students. Operations are funded primarily through research grants from bodies such as the NRF, World Bank, UK Government, Norwegian Government, and ICANN.

Product overview

C3SA is a cybersecurity research and capacity-building center at the University of Cape Town, not a traditional product company. It operates as a consortium between Research ICT Africa (RIA), UCT Department of Information Systems, GCSCC at Oxford, and NUPI. The organization's offerings consist primarily of research services, training programs, frameworks, and educational initiatives. Key offerings include: (1) DNS Resilience Training Program - hands-on technical training on DNS security and DNSSEC; (2) Cybersecurity Maturity Model (CMM) Reviews - national and institutional capacity assessments across five dimensions; (3) Cy4MaS (Cybersecurity for Marginalised Schools) Model - a framework for safeguarding school digital ecosystems; (4) DNS Abuse Research Project in SADC; (5) Cyber 9/12 Strategy Challenge - student competition on cyber policy; (6) Webinar series and research publications. The portfolio works as interconnected capacity-building initiatives rather than a unified software platform.

Differentiator

Problem solved

Functional benefit

Quantifiable outcome

• 30+ ICT professionals trained in DNS resilience across Lesotho's digital ecosystem
• +2 more outcomes

Named customers4 records

Segments5 records

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

13 partnerships are on record, tiered core and supporting.

• CISPA Helmholtz Center for Information Security (Germany)coreStrategic or Co-development Partner · 1 September 2025New research collaboration between C3SA, UCT, WITS, and CISPA focusing on cybersecurity capacity development and trustworthy AI. Includes knowledge exchange, joint research projects, educational opportunities, and exchange programs.
• University of the Witwatersrand (WITS)coreStrategic or Co-development Partner · 1 September 2025WITS partnered with C3SA and UCT on the CISPA collaboration for joint cybersecurity research with focus on AI and capacity development.
• U.S. Department of State Bureau of Cyberspace and Digital PolicycoreStrategic or Co-development Partner · 1 January 2024Co-host of Cyber 9/12 Strategy Challenge, providing expertise and support for cybersecurity policy and strategy competitions for African students.
• Atlantic CouncilcoreStrategic or Co-development Partner · 1 January 2024Long-term partner co-hosting the Cyber 9/12 Strategy Challenge series for Africa, bringing global cyber policy competition format to African students since 2021.
• MITREcoreStrategic or Co-development Partner · 1 January 2024Technical partner for Cyber 9/12 Strategy Challenge, contributing expertise in cybersecurity frameworks and competition design.
• Research ICT Africa (RIA)coreStrategic or Co-development PartnerRIA is a consortium partner in C3SA. It is an African think tank that operates to fill strategic gaps in developing sustainable information society and digital economy through multidisciplinary research capacity.
• University of Cape Town (UCT) - Department of Information SystemscoreStrategic or Co-development PartnerUCT's Department of Information Systems is a consortium partner and hosts C3SA. The partnership provides academic infrastructure, research expertise, and student engagement.
• Global Cyber Security Capacity Centre (GCSCC) at University of OxfordcoreStrategic or Co-development PartnerGCSCC is a consortium partner providing the Cybersecurity Maturity Model (CMM) framework and international expertise. C3SA is part of the global constellation of regional cybersecurity capacity research centres.
• Norwegian Institute of International Affairs (NUPI)coreStrategic or Co-development PartnerNUPI is a consortium partner contributing international affairs expertise to cybersecurity capacity research and policy development.
• Global Forum on Cyber Expertise (GFCE)coreStrategic or Co-development PartnerC3SA is a partner of GFCE, a global forum with 170+ members and partners working to strengthen cyber capacity and expertise globally. GFCE builds global cyber capacity through working groups, Cybil Knowledge Portal, and practical initiatives.
• Oceania Cyber Security Centre (OCSC)coreStrategic or Co-development PartnerOCSC is part of the global constellation with C3SA and GCSCC. OCSC advances cybersecurity education and research in Australia and the Indo-Pacific region, conducting national cybersecurity capacity assessments using Oxford's CMM.
• Internet Society Lesotho ChaptersupportingStrategic or Co-development PartnerPartnered with C3SA and Lesotho Communications Authority to organize DNS Resilience Training in Lesotho.
• Cybil Knowledge PortalsupportingOthersGFCE's knowledge portal used by C3SA for sharing research and resources on cybersecurity capacity building.

Scale indicators5 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• African Union - AUDA-NEPAD: African Union's development agency coordinating continental cybersecurity initiatives including AUDA-NEPAD programs. Operates at a regional scale comparable to C3SA but with a broader mandate and substantially more resources as a continental policy body.
• ENISA (European Union Agency for Cybersecurity): EU agency supporting member states in cybersecurity capacity building, including CMM-style maturity assessments in Europe. Operates a much broader and more institutionalized capacity-building program than C3SA but addresses a similar mandate of national cyber resilience.
• Global Forum on Cyber Expertise (GFCE): Global umbrella organization with 170+ members and partners working on cyber capacity building worldwide. C3SA is a GFCE partner; GFCE operates at a much larger scale and broader geographic scope, coordinating similar capacity-building efforts across many regions.

Others

• Atlantic Council: Long-term partner co-hosting the Cyber 9/12 Strategy Challenge series for Africa. Atlantic Council runs the global program while C3SA delivers the Africa edition - making it a peer in the cyber policy competition ecosystem rather than a direct competitor.
• CISPA Helmholtz Center for Information Security: German cybersecurity research center that entered a 2025 collaboration agreement with C3SA, UCT, and WITS on cybersecurity capacity and trustworthy AI. While a research partner rather than a peer, CISPA represents comparable academic cybersecurity research capacity in a global context.
• Norwegian Institute of International Affairs (NUPI): Consortium partner contributing international affairs expertise to C3SA's cybersecurity policy research. While NUPI is broader than cybersecurity, its research-and-policy orientation and consortium role make it a thematically adjacent peer organization.
• Cybil Knowledge Portal: GFCE-affiliated knowledge-sharing platform for global cyber capacity building resources. Used by C3SA for publishing and accessing research outputs - making it an adjacent knowledge-infrastructure peer rather than a direct competitor.

Direct peers

• Research ICT Africa (RIA): African think tank and C3SA consortium partner that conducts multidisciplinary research on ICT policy and digital economy. While broader in scope than cybersecurity, RIA shares similar institutional structure, audience, and research-output model with C3SA.
• Global Cyber Security Capacity Centre (GCSCC): Parent methodology holder at the University of Oxford and originator of the Cybersecurity Maturity Model (CMM). C3SA is the African regional node of GCSCC's global constellation, deploying the same CMM framework that GCSCC developed - making it the most directly comparable peer organization.
• Oceania Cyber Security Centre (OCSC): Sibling regional node of the GCSCC global constellation, covering the Indo-Pacific region with the same CMM methodology. Operates as a near-identical capacity-building center to C3SA, with similar structure, scope, and outputs - making it the most directly comparable peer organization.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/C3SA_UCT
• LinkedInlinkedin.com/company/c3sa

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles19 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about C3SA_UCT