Plena Solutions

Plena Solutions is an African-Israeli solutions provider, focused on delivering cybersecurity and broader digital solutions to the East-African market

[Plena Solutions @PlenaSolutions]

7/A few practical places to start:
- Build an AI inventory (including Shadow AI)
- Name a single owner for AI governance, reporting to the board
- Update vendor agreements
- Put verification protocols in place for generative AI output

[Plena Solutions @PlenaSolutions]

1/⚖️ AI regulation in Africa just got real.
In the first half of 2026, 🇰🇪 Kenya, 🇳🇬 Nigeria, and 🇿🇦 South Africa each made significant moves toward dedicated AI governance regimes.
Three different approaches. One direction. 🧵

[Plena Solutions @PlenaSolutions]

6/These are no longer best practices. They are becoming legal obligations.
The question for anyone operating in or with East Africa is no longer whether AI regulation is coming. It's whether your internal governance can keep up with what regulators are setting in motion.

[Plena Solutions @PlenaSolutions]

6/ The goal isn't to stop people using AI. It's to make sure they can use it safely.
At Plena Solutions we help organizations assess their exposure and put the right controls in place.

[Plena Solutions @PlenaSolutions]

1/ Your employees are already using AI at work. The question is whether your organization knows about it, and whether it's safe. 🧵>>

[Plena Solutions @PlenaSolutions]

5/ Three starting points: → Find out what AI tools your teams actually use → Provide a safe approved alternative — blocking without replacing makes it invisible → Brief leadership: this is a legal and organizational liability, not just an IT issue>

[Plena Solutions @PlenaSolutions]

6/ Managing third-party risk doesn't require sophisticated technology.
It requires knowing who has access to your systems, holding them to clear standards, and planning for their failure.
The weakest point in your security may not be yours to control. But it is yours to manage.

[Plena Solutions @PlenaSolutions]

1/ Your vendors are your attack surface.
Most organizations secure their own systems carefully, and barely think about the suppliers and service providers they've handed access to.
Attackers have noticed. 🧵

[Plena Solutions @PlenaSolutions]

5/ Neither breach started inside the target organization.
The entry point was a contractor. A service provider. Someone trusted and authorized.

[Plena Solutions @PlenaSolutions]

The most sophisticated security infrastructure provides zero protection if it can be compromised remotely.
As African ports modernize, integrating physical and cybersecurity must be part of the plan from day one, not an after the fact.

[Plena Solutions @PlenaSolutions]

⛴️ Africa's maritime ports move billions in trade every year. Any port security is a national priority. However, there's a growing vulnerability that most port operators can significantly improve. The physical security infrastructure they rely on is becoming a cyber target. 🧵 >

[Plena Solutions @PlenaSolutions]

The good news: there is what to do
-Inventory all networked physical security devices and systems
- Change default credentials across all devices
- Segment physical security systems within dedicated network
- Establish joint ownership between physical security and IT teams >