NCC Unveils Comprehensive Cybersecurity Framework
By George Ozalla
The Nigerian Communications Commission (NCC) has announced plans to develop a comprehensive cybersecurity framework to safeguard the country’s rapidly expanding telecommunications industry from escalating cyber threats. This move aims to strengthen the sector’s resilience and protect sensitive consumer data and national digital assets.

The framework will outline minimum cybersecurity expectations for telecom operators, including mandatory incident reporting, comprehensive risk management strategies, and enhanced information sharing mechanisms with regulatory agencies. It will also categorize telecom operators into distinct tiers to ensure entities handling high volumes of sensitive data receive tailored regulatory oversight.
The NCC emphasizes that cybersecurity is no longer optional but a mandatory requirement for the telecom sector. A robust framework will foster a unified and resilient cybersecurity posture across the industry, enhance the protection of telecom infrastructure from cyber-attacks, safeguard consumer data, privacy, and trust in digital services, and ensure alignment with national cybersecurity strategies and international best practices.
The framework is expected to be finalized by the end of the third quarter of 2025, with implementation set to take off in early 2026. The NCC will conduct a baseline assessment to understand existing vulnerabilities before rolling out new protections.
