NCC Unveils Comprehensive Cyber Threats Framework

By Adedapo Adesanya

The Nigerian Communications Commission (NCC) has unveiled plans for a comprehensive framework to safeguard the rapidly expanding telecommunications industry in a significant step toward bolstering the nation’s cybersecurity defences.

The Executive Vice Chairman (EVC) of the NCC, Mr Aminu Maida, at a Cybersecurity Framework Development Regulatory Meeting on Wednesday in Lagos, highlighted the impressive growth of Nigeria’s telecom sector, which moved from fewer than half a million connected lines in 2001 to over 172 million active subscribers today, with internet users exceeding 141 million.

Mr Maida, who was represented by the Executive Commissioner for Technical Services at NCC, Mr Abraham Oshadami, said his expansion firmly positioned the sector as a cornerstone of economic development, social inclusion, and national transformation.

He, however, said that the sector’s growth also brought heightened exposure to cyber threats such as malware, ransomware, and phishing, which were constantly evolving.

He warned that government infrastructure, forming the core of Nigeria’s critical national information infrastructure, remained a prime target for cybercriminals and hostile actors.

“To counter these growing dangers, the NCC initiated the framework’s development with clear objectives.

“Some of the objectives are to foster a unified and resilient cybersecurity posture across the industry, enhance the protection of telecom infrastructure, shield consumer data and privacy, and align with both the National Cybersecurity Strategy and international best practices.

“The framework also aims to build industry-wide expertise to anticipate, detect, respond to, and recover from cyber incidents, while proactively identifying and mitigating future risks,” he said.

The EVC pointed out that the current regulatory landscape, including acts like the Cybercrime Prevention Procedures Act of 2015 and the Nigerian Data Protection Act 2003, now mandated robust cybersecurity measures for critical sectors like telecommunications.

Referencing reports from the United Nations Economic Committee for Africa, Maida said that 10 per cent increase in cybersecurity maturity could lead to substantial per capita GDP growth across the continent.

He stated that the framework would outline minimum cybersecurity expectations for all operators, offering clear guidance on incident reporting, risk management, information sharing, and collaboration between agencies.

He stressed the importance of jointly creating the framework, inviting active participation from network operators, internet service providers, data centre operators, government agencies, academia, and technology providers.

Adding his input, the Chairman of the Committee on Development of Cybersecurity Framework, Mr Babagana Digima, said the framework was designed to structure cybersecurity efforts and address existing gaps in the telecommunication sector.

He stressed the importance of a baseline study to understand the industry’s present standing before implementing new control measures.

Mr Digima also reaffirmed the commission’s commitment to collaborating with all stakeholders to build a secure, resilient, and trusted computational ecosystem in Nigeria.