By George Ozalla
The Nigerian Communications Commission is developing a comprehensive cybersecurity framework to protect the country’s rapidly expanding telecommunications industry from escalating cyber threats. The framework, expected to be implemented by telecom licensees in 2026, aims to provide a unified and structured approach to risk management and cyber resilience across all telecommunications stakeholders in Nigeria.
The framework will introduce minimum cybersecurity requirements for telecommunications operators, covering incident reporting protocols, comprehensive risk management strategies, enhanced information sharing mechanisms, and active collaboration with regulatory agencies. Telecom operators will be categorized into distinct tiers to ensure entities handling high volumes of sensitive data receive tailored regulatory oversight.
The NCC will conduct a comprehensive baseline assessment of the telecom industry’s current cybersecurity posture to identify gaps and inform the deployment of targeted safeguards. The framework is expected to be finalized by the end of the third quarter of 2025, with implementation slated to begin in early 2026.
The NCC’s initiative aims to strengthen Nigeria’s digital economy and ensure the telecommunications backbone remains robust against evolving cyber threats. With Africa being the world’s most targeted region for cyberattacks, the framework is a crucial step towards enhancing national cybersecurity preparedness and sector resilience.
