Ghana Launches National Cybersecurity Policy and Strategy to Combat Rising Threats

In a significant move to bolster the nation’s digital security, Ghana’s Communications and Digitalisation Minister, Ursula Owusu-Ekuful, has officially launched the National Cybersecurity Policy and Strategy (NCPS). This initiative comes in response to the escalating cybersecurity threats facing the country, particularly as it approaches the critical December 7 elections. The policy aims to create a secure digital environment, safeguard vital infrastructure, and enhance national capacity to deter cybercrime.

Addressing Cybersecurity Threats

The launch of the NCPS is timely, especially following a recent warning from the Africa Centre for Digital Transformation (ACDT) about potential cyber threats targeting Ghana’s upcoming elections. The ACDT urged stakeholders to take immediate action to protect the electoral process, highlighting the need for a robust cybersecurity framework. The organization recommended that Ghana strengthen its cybersecurity infrastructure through regular security audits and penetration testing.

Minister Owusu-Ekuful emphasized the urgency of developing a national strategy to counteract the threats posed by cyber attacks. “Our world today has changed, with digitalisation presenting both opportunities and risks to individuals, businesses, societies, and nations,” she stated. The minister pointed out that the increasing reliance on digital networks for socio-economic development has attracted malicious actors aiming to compromise the confidentiality, integrity, and availability of these systems.

Key Objectives of the NCPS

The National Cybersecurity Policy and Strategy is designed in accordance with the International Telecommunication Union’s Global Cybersecurity Agenda guidelines. Its primary objectives include:

1. Building a Robust Digital Ecosystem: Establishing a secure and resilient digital environment that fosters innovation and growth.
2. Securing Digital Infrastructure: Protecting critical infrastructure from cyber threats to ensure uninterrupted services.
3. Developing National Capacity: Enhancing the skills and capabilities of individuals and organizations to effectively respond to cyber incidents.
4. Deterring Cybercrime: Implementing measures to prevent and combat cybercriminal activities.
5. Strengthening Cooperation: Fostering collaboration between public and private sectors to enhance overall cybersecurity efforts.

The Ghana Cyber Security Authority (CSA) will oversee the implementation of the NCPS, ensuring that both public and private entities are engaged in the process.

Recent Developments in Cybersecurity

In May 2023, the Bank of Ghana (BoG) took a proactive step by launching the Financial Industry Command Security Operations Centre (FICSOC). This initiative aims to enhance the nation’s cyber resilience by providing a platform for sharing threat intelligence and coordinating cybersecurity efforts across the banking and financial sectors.

Despite these efforts, the first half of 2023 saw cyber fraud activities resulting in direct financial losses of approximately $4.32 million (GH¢49.5 million) in Ghana. This figure represents only a fraction of the incidents reported to government organizations. Furthermore, Ghana was ranked ninth among ten African countries with the most data breaches in 2024, maintaining a global rank of 92nd. The country experienced a staggering 997% increase in breaches in the first quarter of 2024 compared to the previous quarter, totaling 1.2 million breaches.

Licensing and Regulation of Cybersecurity Providers

In response to the growing cybersecurity challenges, the Ghana Cyber Security Authority has taken steps to regulate the industry by granting licenses and accreditation to 51 cybersecurity players. This includes eight Cybersecurity Service Providers (CSPs), eight Cybersecurity Establishments (CEs), and 35 Cybersecurity Professionals (CPs). The government has also banned unlicensed operators from conducting business in the country, emphasizing the importance of a regulated cybersecurity landscape.

Since the licensing process began in March 2023, the CSA has received 907 applications for licensing and accreditation, reflecting the growing recognition of the need for professional cybersecurity services in Ghana.

Conclusion

The launch of the National Cybersecurity Policy and Strategy marks a pivotal moment in Ghana’s efforts to combat rising cybersecurity threats. With the increasing reliance on digital systems and the looming threat of cyber attacks, the government’s proactive approach aims to safeguard the nation’s digital future. As Ghana prepares for its upcoming elections, the implementation of this policy will be crucial in ensuring a secure and resilient digital environment for all citizens. The collaboration between the government, private sector, and cybersecurity professionals will be essential in building a robust defense against cyber threats and fostering a culture of cybersecurity awareness across the nation.