Cybersecurity: Nigeria rolls out six steps for organisations to fortify cyber resilience

The Federal Government internet police has outlined six key steps for Nigerian organisations to fortify their cyber resilience under plans to safeguard digital infrastructure and secure the nation’s national security amid rising cybersecurity threats.

The Nigeria Computer Emergency Response Team (ngCERT), the nation’s internet police under the Office of National Security Adviser, Mr Nuhu Ribadu, issued the advisory underscoring its responsibility to secure Nigeria’s digital infrastructure and respond to cybersecurity threats within the nation’s cyberspace.

Nigeria is now more connected than ever before with 219,304,281 active phone lines; 164,368,292 and 94,364,751 internet and broadband connections as of Q1 2024, according to official market information by the Nigerian Communications Commission (NCC), a development that underscores the growing connectivity across the country.

An AI image shows a man seen in an internet monitoring centre. ngCERT, the Nigerian internet police said that the advisory for organisations to fortify their systems aligns with its mission to secure Nigeria’s digital infrastructure and respond to cybersecurity threats within the nation’s cyberspace. Image credit: Gencraft.

Nigeria is now more connected than ever before with 219,304,281 active phone lines; 164,368,292 and 94,364,751 internet and broadband connections as of Q1 2024, according to official market information by the Nigerian Communications Commission (NCC), a development that underscores the growing connectivity across the country.

ngCERT on six step to boost cybersecurity

The Nigerian internet police said that the advisory for organisations to fortify their systems aligns with its mission to secure Nigeria’s digital infrastructure and respond to cybersecurity threats within the nation’s cyberspace.

To continue to keep the digital infrastructure that supports the connected millions across the country, Nigeria’s ngCERT has provided a six-pronged approach as guidance to organisations on fortifying their cyber defences against potential threats.

ngCERT said that the six essential steps for Nigerian organisations to build robust cyber resilience include:

Step 1: Conduct rigorous risk assessment: ngCERT said that organisations must conduct comprehensive risk assessments of their cybersecurity posture. By identifying potential threats and vulnerabilities, organisations can prioritise critical assets and processes requiring protection, ensuring proactive mitigation measures are in place.

Step 2: Implement stringent security controls: The implementation of robust security controls is paramount in thwarting cyber threats. ngCERT advises organisations to deploy a combination of technical and administrative measures, including firewalls, antivirus software, encryption protocols, and access control policies, tailored to their specific needs and risk profile.

Step 3: Develop comprehensive incident response plan: A well-defined incident response plan is imperative for effective management of cyber incidents. Organisations are encouraged to establish clear roles, communication protocols, and mitigation strategies, with regular testing and refinement to ensure readiness and effectiveness in crisis situations.

Step 4: Prioritize ongoing employee training: Recognizing the human element as a vulnerability, ngCERT underscores the importance of regular cybersecurity training for employees. By raising awareness of evolving cyber threats and best practices, organisations empower their workforce to detect and mitigate potential risks, bolstering overall resilience.

Step 5: Establish robust backup and recovery procedures: To minimize the impact of cyber incidents, nCERT advises organisations to implement robust data backup and recovery procedures. Securely stored backups enable swift restoration of critical data, ensuring business continuity and mitigating financial and reputational damage.

Step 6: Embrace continuous improvement: ngCERT emphasises the necessity of adopting a proactive and dynamic approach to cybersecurity. Organisations must continuously monitor, evaluate, and enhance their cybersecurity posture, adapting strategies to address emerging threats effectively and maintain resilience in an evolving threat landscape.