The Nigerian Communications Commission (NCC) yesterday began moves to put in place a comprehensive cyber security framework to safeguard the communications sector of the economy which it said has become a critical national infrastructure.
Executive Vice Chairman/CEO of NCC, Dr Aminu Maida, in his keynote to a broad spectrum of stakeholders a forum to kick start the process in Ikoyi, Lagos, said backed by the World Bank Group, the initiative marked a significant milestone in the journey to strengthen the cyber-security posture of Nigeria’s communications sector
Represented by the Executive Commissioner, Technical Services at NCC, Engr.Abraham Oshademi, the EVC said over the past two decades, Nigeria’s telecommunications industry has witnessed remarkable growth and conservation, noting that from 2.5 million connected lines in 2001, the sector has grown to 172,948,309 active subscribers, of which 141,985,207 are active internet subscribers as of October 2025.
He said the exponential growth underscores the sector’s role as a critical enabler for economic development, social innovation, and national transformation. The communications industry is not only one of the largest contributors to Nigeria’s gross domestic product (GDP), but also a backbone of the nation’s digital economy.
“As we continue to expand digital access and deliver connectivity to our commercial communities, we must also be proactive in securing the digital infrastructure and systems that support this purpose.
“While the need for cyber-security is growing, to the increasing complexity of our digital ecosystem comes heightened vulnerability. Cyber-threats such as malware, ransomware, phishing, distributed denial-of-service (DDoS) to the users and insider threats are all evolving rapidly. The communications infrastructure, which forms the core of Nigeria’s critical national information infrastructure, remains the high-value target for cybercriminals and hostile partners.
“It is against this background that the NCC has initiated the development of a comprehensive cyber-security framework for the communications sector. The primary objectives of this framework include: promoting a unified and resilient cyber-security protocol across the communications industry; enhancing the protection of telecom infrastructure from cyber-attacks; securing consumer data, privacy, and trust in digital services; ensuring alignment with national cyber-security strategies, including the National Cyber-Security Policy Strategies and CPS 2021, and international best practices; building sector-wide competencies and capacity to anticipate, detect, respond, and recover from cyber-crime incidents, as well as identifying and mitigating cyber-risk in the industry.” Dr Maida said.
The development of this framework, according to him, is also informed by the evolving regulatory landscape, where cyber-security is increasingly becoming a confirmed imperative rather than a discretionary measure. The Nigerian Data Protection Act 2003, the NCPS 2021, and various global instruments now require organizations, especially in critical sectors like telecommunications, to implement appropriate cyber-security measures.
“In addition, the framework is expected to maintain cyber-security maturity for several decades, relying on commitments from other frameworks such as the ITU Global Cyber Security Agreement. Indeed, it is no surprise that, according to the latest report from the United Nations Economic Committee on Africa, a 10per cent increase in cyber-security maturity delivers a capital GDP increase of between 0.66per cent and 5.4per cent in Africa. This is therefore an indication of the importance of improving our cyber-security maturity level,” he said.
According to him, as a regulator, the Commission is committed to creating a balanced framework that not only ensures a plan, but also supports innovation, business consistency, and trust in African economies. “Through this framework, we seek to define minimum cyber-security expectations for all Africans, while also providing clear guidance on incident-supporting, risk management, information sharing, and inter-agency collaboration. This meeting is the first in a series of stakeholders’ engagements.
“It is intended to formally inform the industry of the Commission’s plan to engage and encourage active participation from all stakeholders in shaping the framework. I strongly believe that the cyber-security framework developed in isolation cannot be effective. It must reflect the realities, concerns, and innovations of those who build, operate, and rely on our telecommunication network.
“Therefore, we welcome the inclusion of globally co-operative internet service providers, wireless service providers, inter-center operators, sectorial and national SETs, corporate agencies, academia, and technology providers. Together, we can co-create a cyber-security framework that is practical, adaptive, and sustainable. In conclusion, as we deepen our digital footprint, the need to protect our networks, infrastructure, and users will never be more urgent.
“This framework is not just about compliance. It is about building trust, resilience, and the secure future of Nigeria’s communication technology. The Commission remains committed to working collaboratively to ensure a digital cyber space remains safe, secure, and enabling for innovation and growth,” he said.
