LIQUID Intelligent Technologies Zimbabwe chief executive officer Lorreta Songola says managing risk is no longer the duty of IT departments, but must involve every level of the organisation.
This included working together to protect information and ensure compliance with laws such as Zimbabwe’s Cyber and Data Protection Act, she said.
The call comes amid data breaches on the continent, with regulators tightening their oversight.
“When a business decides to move to the cloud, one of the most important considerations is maintaining the safety, privacy of the company and customer data,” Songola said.
“Data breaches can originate from various sources, including but not limited to malicious activity, cyberattacks, IT failures, or simple human error. That is why companies need to be prepared for any eventuality when it comes to data governance and compliance, which entails careful planning and expert support.”
- Dissecting Zimbabwe’s industrial collapse: Why conventional corporate governance thinking is part of the problem
- €50m guarantee to unlock power funding for Zimbabwe IPPs
- Total funds under management rise 9,59% to ZiG90,6bn
- Tharisa doubles down on Karo for long-term PGM growth
- FBC Holdings gets approval for bank, building society merger
She said data governance was about keeping data (at rest and in motion) safe and fit for purpose.
“This includes who can access it, how long it is kept, and when it is destroyed. Compliance involves meeting the legal obligations associated with that data. Fortunately, for companies embracing digital transformation, there is an increasing focus on legislation and regulations aimed at data protection and governance,” Songola said.
“Companies that successfully navigate this transition are those that understand that managing risk and protecting data are no longer the sole responsibility of the IT team but of the entire organisation. Risk needs to be managed across people, processes, and technology—and this calls for a collaborative approach.”
Cyberattacks in Africa are on the rise, and Zimbabwe’s regulators are tightening their oversight, notably through the Cyber and Data Protection Act [Chapter 12:07].


