Ghana becomes first country in Africa to implement cybersecurity regulatory framework

The Cyber Se­curity Authority (CSA) has licensed 51 cybersecurity players in line with a major step to align the country’s cybersecurity standards with global bench­marks.

Comprising Cybersecurity Service Providers (CSPs), Cyber security Establishments (CEs), and Cybersecurity Professionals (CPs), they are duly accredited to offer cybersecurity services.

This makes Ghana the first country in Africa and the second globally, following Singapore, to implement a comprehensive regulatory framework for these Cybersecurity players.

At a ceremony last Friday, the Director-General of the CSA, Dr Albert Antwi-Boasiako, cautioned that persons or institutions who offer cyber security services with­out a license or accreditation were in violation of the Cyber security Act, 2020 (Act 1038).

“We would stop at nothing to ensure that all defaulting insti­tutions and individuals face the appropriate sanctions, including criminal prosecutions and adminis­trative penalties,” he said.

The Director-General urged oth­er CSPs, CEs, and CPs who were at various stages of the licensing and accreditation process to work hard to meet all the requirements.

He said the CSA, in collabora­tion with the Public Procurement Authority (PPA) and other relevant stakeholders, were working to ensure compliance with the guide­lines pursuant to the Cybersecurity Act.

Dr Antwi-Boasiako said the CSA started the registration process in March 2023 in line with the Cybersecurity Act, 2020 which mandates the CSA to regulate cy­bersecurity activities in the country.

He said the collaborative ap­proach taken by the CSA, involve extensive stakeholder engagements since October 2022 to refine reg­ulatory guidelines and to support registrants through the application process.

“More than 30 different industry engagements have been conducted across different sectors, including industry players, aca­demia, civil society organisations, and government institutions to achieve this feat,” he said.

Dr. Antwi-Boasiako said through extensive consultations, invaluable insights were gathered to refine the guidelines for the process, coupled with remarkable support and dedication from all stakeholders.

A member of the CSA governing board, Mrs Adelaide Benneh-Prempeh, indicated that the regulatory framework was a strategic pillar to the development of the cybersecurity industry in Ghana and a testament to a pro­active stance in safeguarding the digital landscape.

“Today’s ceremony is not just a culmination but a catalyst for con­tinued collaboration and innova­tion in our cybersecurity ecosys­tem. The synergy among CSPs, CEs, and CPs will drive us towards adaptive resilience and continuous improvement,” she said.

She congratulated the newly licensed players.