RT10

In 2023, Resilience Technologies launched the RT-10 Project to address a critical question: What is the most cost-effective and contextually relevant model of cybersecurity intervention for civil society organisations (CSOs) in Sub-Saharan Africa? With this project, we aimed to provide a scalable cybersecurity framework that would both empower CSOs and Security Organisations with the tools and knowledge needed to provide holistic cybersecurity intervention for CSOs in Sub-Saharan Africa.

Working with CSOs across Uganda, Zimbabwe, Kenya, Nigeria, Ethiopia, and Tanzania, the RT-10 Project laid the groundwork for the ‘Resilience Model’—our tested framework designed to strengthen digital resilience for human rights defenders and community organisations across Africa. This model has been presented to community members at key convenings such as DRIF24 and is scheduled for a further presentation at RightsCon25, highlighting its role as a critical resource in building secure digital ecosystems across the region.

The RT-10 Project was a comprehensive effort, combining research-backed assessments with tailored cybersecurity solutions to meet the unique needs of each organisation involved. The project included:

• Focus Group Security Assessments: Using robust tools like the Digital Wellness Check (DWC) tool by the Centre for Digital Resilience, Penetration Testing and Vulnerability Assessment, and NIST and OWASP standards, we conducted rigorous evaluations to identify weaknesses in technology, policies, processes, and personnel for each organisation.
• Capacity-Building Training and Infrastructure Hardening: Organisations received hands-on training and support to implement targeted security measures, reinforced with customised infrastructure hardening interventions including tailored digital security policies.
• Iterative Feedback Loop: Interventions were continuously fine-tuned based on feedback and assessments, ensuring that solutions were effective, sustainable, and fully aligned with each organisation’s operational context.
• The RT-10 Report: We developed this to provide an in-depth analysis of digital security within African CSOs. This comprehensive report offers detailed findings and recommendations based on the digital security assessment conducted under this project, highlighting both strengths and vulnerabilities in their digital security practices. Structured around key focus areas—people, processes, technology, and policies—the report reveals critical gaps along with insights for future research.

The RT-10 Project significantly strengthened the digital resilience of participating CSOs, enabling them to safeguard sensitive data, defend against cyber threats, and maintain uninterrupted operations. The project’s personalised approach and rigorous assessment process helped these organisations to:

• Fortify their Infrastructure and Strengthen Defences: Increased protection of digital systems through targeted interventions.
• Empower Staff with Resilience Skills: Equipped teams with critical skills and knowledge to recognise, respond to, and prevent cyber incidents.
• Implement Sustainable Security Policies and Practices: Developed long-term security policies, strategies and protocols, empowering each organisation to manage digital threats independently.

The insights and methodologies developed through the RT-10 Project have culminated in The Resilience Model—a replicable, research-backed framework tailored for vulnerable civil society actors in Africa. This model provides a scalable solution for security organisations and CSOs across Sub-Saharan Africa to build comprehensive digital resilience through tested, evidence-based interventions. Moving forward, Resilience Technologies aims to expand the RT-10 framework, ensuring that even more organisations across the continent have access to the tools and knowledge required to operate safely in the digital realm.