The risks that specialist risk consultancies identify for Southern African businesses recur with remarkable consistency across years: political and policy uncertainty, currency volatility, infrastructure and electricity reliability, cybercrime, and pressure on consumer spending. For a small business, the value of a risk list is not prediction but preparation, working out which of these would actually damage the business and what would reduce that exposure.
A risk that recurs annually is better treated as a permanent operating condition to plan around than as a forecast to be right or wrong about.
Policy and political uncertainty affects planning horizons
Uncertainty about regulation, tax and policy direction shortens how far ahead businesses can plan with confidence, which tends to reduce long-term investment and favours decisions that preserve flexibility over those that lock in commitments.
Currency volatility reaches businesses that never trade internationally
Exchange rate movements pass through into fuel, imported equipment, software subscriptions and supplier pricing, which means a business with no direct foreign exposure still carries currency risk through its cost base.
Infrastructure reliability requires explicit contingency
Electricity and connectivity interruptions are predictable enough in this region to warrant a planned response rather than an improvised one, with the practical question being how long the business can operate through an outage and what it would cost to extend that.
Cybercrime is now a routine risk rather than an exotic one
Small businesses are targeted precisely because their defences are typically weaker, and the basic protections, multi-factor authentication, backups, staff awareness, address a large share of realistic attack routes at relatively low cost.
Currency and interest rate conditions, which sit behind several of these risks, are tracked in the monetary policy statements published by the South African Reserve Bank.
Frequently asked questions
How useful are annual business risk forecasts?
Useful for preparation rather than prediction, particularly since the same risks recur year after year, which makes them better treated as permanent operating conditions than as forecasts.
Does currency volatility affect businesses that do not import or export?
Yes, through fuel costs, imported equipment, software subscriptions and supplier pricing, meaning a purely domestic business still carries currency exposure in its cost base.
How should a business plan for infrastructure interruptions?
By establishing how long it can continue operating through an outage and what extending that would cost, which turns an improvised response into a planned one.
Why are small businesses targeted by cybercrime?
Because their defences are typically weaker than large organisations’, which makes basic protections, multi-factor authentication, reliable backups and staff awareness, unusually high-value relative to cost.
How does policy uncertainty actually affect a small business?
It shortens the horizon over which planning is reliable, which tends to favour decisions preserving flexibility over those locking in long-term commitments.
Further reading
Originally published in December 2017. Updated September 2026 to treat these as recurring operating conditions to plan around rather than a forecast for a single year.
