The 2024 protests in Kenya highlighted a transformative shift in the corporate security landscape, where the primary threat transitioned from physical unrest to the “weaponisation of information.” Fella J. Obala of Salama Fikira Group notes that during this period, security managers struggled not with the protests themselves, but with the paralyzing uncertainty caused by a flood of misinformation. From recirculated old footage to unverified WhatsApp warnings, the digital environment became so polluted that organisations frequently postponed executive travel, shifted to remote work, and suspended operations based on intelligence that later proved false. This climate revealed that uncertainty has become a distinct, high-impact risk vector capable of disrupting supply chains and business continuity.
The evolution of these threats is driven by the rapid digital adoption and low institutional trust prevalent across Africa. Distinguishing between misinformation—shared without malice—and disinformation or coordinated influence operations—designed to manipulate perceptions—has become essential for security professionals. Modern digital actors now leverage AI-generated content, deepfakes, and bot networks to amplify misleading narratives with alarming speed. Because these threats often bypass traditional media gatekeepers, information now travels faster than it can be verified, forcing security teams to pivot from reacting to physical events to managing the volatile perceptions of those events.
For businesses, these information threats have matured into enterprise-level risks that extend far beyond the remit of public relations. False narratives can directly jeopardize employee safety by creating unnecessary panic, while damaging a company’s reputation through viral, often baseless, accusations of political complicity. In the Kenyan context, businesses perceived as aligned with the government or political elites were frequently targeted by protesters, regardless of their actual involvement. This dynamic forced many firms to adapt their communication and operational strategies, such as framing branch closures around staff welfare rather than commercial disruptions to mitigate reputational blowback.
The Kenyan experience serves as a microcosm for a broader African trend where information has become a weapon of conflict. Across the continent, from the civil strife in Sudan and Ethiopia to the anti-UN sentiment in the DRC, competing narratives are being used by state-sponsored actors, political factions, and criminal networks to shape public opinion and mobilize hostility. In these environments, the distinction between physical security and information security has virtually disappeared, as the digital manipulation of reality leads directly to real-world consequences for personnel and assets.
To navigate this changing landscape, security leaders must integrate information resilience into their core crisis-management frameworks. This requires a departure from traditional, siloed threat assessments. Instead, organisations should adopt a proactive, four-stage approach: anticipation through OSINT and sentiment analysis; rigorous verification via trusted, on-the-ground networks; integration of communication and security teams into a unified crisis response; and a calculated, transparent response strategy that weighs the necessity of public engagement against the risk of amplifying false narratives.
Ultimately, the most significant challenge facing security professionals today is that narratives now shape human behavior as much as physical circumstances do. In a region where digital platforms can instantly turn misinformation into operational paralysis, the most dangerous risk is not necessarily what an organization knows, but what it mistakenly believes to be true. Building a robust, intelligence-led defense against these information-driven threats is no longer optional; it is a critical requirement for maintaining business stability in an increasingly complex and interconnected African risk environment.