By George Ozalla
The Nigerian Communications Commission has launched a new cybersecurity framework based on the Zero Trust model to strengthen the security and resilience of the nation’s telecommunications infrastructure. The initiative is aimed at protecting critical networks against increasingly sophisticated cyber threats.
Under the Zero Trust approach, every user, device, and connection must be continuously verified before access is granted, rather than assuming safety simply because they are within the network perimeter. This strategy is intended to prevent attackers from moving laterally within networks in the event of a breach.
The Cyber Resilience Framework for the Nigerian Communications Sector provides detailed guidance and standards for all licensed telecom operators, internet service providers, and digital infrastructure companies. Operators are required to integrate advanced cybersecurity measures into their operations, establish incident response protocols, appoint cybersecurity officers, and implement continuous risk management and verification controls.
The framework also mandates the establishment of a sector-wide Security Operations Centre under the NCC’s Computer Security Incident Response Team. The centre will facilitate coordinated monitoring, threat intelligence sharing, and rapid response across operators to protect services including internet connectivity, digital identity platforms, and emergency communications.
Telecom companies have been given a 12-month period to comply with the framework. The NCC will monitor implementation through a new Cyber Capability Index, which evaluates how effectively operators meet the required cybersecurity standards.
The commission said the framework reflects the growing importance of securing Nigeria’s telecom infrastructure, which serves millions of subscribers and underpins the country’s digital economy. Industry stakeholders have welcomed the move as a timely and necessary measure to reinforce confidence in Nigeria’s digital services.
This development follows ongoing efforts by the NCC to advance cybersecurity readiness across the telecom sector and ensure resilience against evolving digital threats.
