Dr Vincent Olatunji, national commissioner and chief executive officer, Nigeria Data Protection Commission (NDPC), has disclosed that hackers launched more than 2,000 attacks on the commission’s service portal within one week, highlighting the growing cyber threats facing government institutions as Nigeria expands its digitalisation efforts.

Olatunji disclosed this on Monday in Abuja at a Technical and Organisational Drill on Data Protection Measures for IT Administrators across Ministries, Departments and Agencies organised by the NDPC.

According to him, the attacks underlined the urgent need for government institutions to strengthen their cyber defences and build the human capacity required to protect sensitive information and digital infrastructure.

He said, “Within one week, we experienced more than 2,000 attempts on our service portal.

More than 2,000 within one week. You can imagine what that means.”

The NDPC boss explained that cyberattacks could be motivated by different objectives, ranging from attempts to embarrass government institutions to financial extortion and other malicious activities.

Olatunji noted that government organisations had increasingly become targets of cybercriminals as more public services migrate online.

He said, “A lot of government organisations are being targeted recently. But I don’t think there’s anyone with any major impact on the economy or citizens’ data. But we don’t have to wait until they have a certain effect before we take action.”

The commissioner said the Federal Government’s ongoing digital transformation agenda was increasing the need for stronger cybersecurity safeguards across MDAs.

He recalled that Nigeria’s digitalisation journey gathered momentum after the issuance of the National Information Technology Policy in 2001, which paved the way for various digital initiatives and strategic roadmaps across government institutions.

According to him, the government is intensifying efforts to achieve full electronic governance and seamless interaction between citizens, businesses, and public institutions.

“A major announcement was made last week that will get 35 ministries fully digitalised in Nigeria within the next few weeks. Efforts are already ongoing. Some are fully digitalised already, while others are being encouraged to come on board. Over 100 agencies of government are already being involved in this,” he said.

Olatunji explained that many government agencies had already deployed platforms that enable citizens to access services remotely without physically visiting government offices.

He cited the commission’s own digital services, saying applicants seeking licences from the NDPC could complete processes online, including application submission and payments.

The NDPC chief, however, warned that greater digital integration also increases exposure to cyber risks.

“The truth is that all these integrations are driven by a lot of technologies developed by private sector organisations. When you move to full integration or when you interact, there is every likelihood that bad actors will target your network,” he said.

To address the challenge, Olatunji called for the development of “cyber warriors” capable of defending government systems and protecting citizens’ data.

He explained that the training programme aligned with key pillars of the commission’s roadmap, including human capital development, technology ecosystem growth, and inter-agency collaboration.

The NDPC boss identified different stages of e-governance maturity, ranging from agencies that only provide information on websites to those offering fully transactional, integrated services.

He stressed that data protection measures should not wait until institutions achieve full digital integration. Olatunji reminded participants that government institutions are classified under the law as data controllers because they collect and process information belonging to Nigerians and non-Nigerians.

He urged MDAs to establish the technical and organisational safeguards required under the Nigeria Data Protection Act to secure their databases and digital platforms.

According to him, technology alone cannot guarantee security without skilled personnel to manage and protect systems.

The commissioner commended public servants, describing them as among the most capable professionals available to drive government policies and programmes.

Olatunji also disclosed that compliance with data privacy requirements across the public sector had improved significantly in recent years. “When we started, the level of compliance with data privacy in the public sector in Nigeria was just four per cent. But now we are doing about 20 per cent and even over,” he said.

He added that many MDAs now make budgetary provisions for data privacy and protection activities, including the appointment of data protection officers and deployment of technical safeguards.

The NDPC chief urged participants to share the knowledge acquired during the training with colleagues in their respective organisations and to develop implementation plans to strengthen compliance.

He said the commission had embarked on various induction programmes, certification initiatives, and training courses for data protection officers across MDAs.

According to him, some participants in the commission’s six-week certification programme were already sitting for examinations, while additional support was being provided through the National Privacy Academy.

Olatunji disclosed that participants at the training would receive free vouchers to access the academy’s self-paced learning platform on data privacy and protection. He also revealed plans to extend training to permanent secretaries and other senior government officials to deepen understanding of data protection obligations across the public sector.

The commissioner encouraged participants to embrace emerging opportunities in the data protection sector, noting that certified data protection officers and licensed Data Protection Compliance Organisations could continue to provide compliance services even after retirement from public service.

In her opening remarks, Dr Tolulope Pius-Fadipe, head of Research and Development at the NDPC,  said the training formed part of the commission’s strategic roadmap for human capital development and efforts to build a strong data privacy architecture across ministries, departments and agencies.

She said the programme was designed to promote responsible data management, strengthen public trust, and protect the rights of data subjects, adding that it would help agencies test and improve their ability to protect sensitive public data and maintain critical services during crises.

Pius-Fadipe urged participants to actively engage in the sessions and implement lessons learned in their respective organisations, noting that public institutions were increasingly facing cyber threats.

Also speaking, Mr Olorunisomo Isola, head of Information Technology and Cybersecurity at the NDPC,  said the workshop was organised in response to rising cyber incidents targeting public infrastructure as government institutions deepen digitalisation efforts.

He said the training would equip IT administrators with the practical skills needed to implement the technical and organisational measures required under Section 39 of the Nigeria Data Protection Act and to prevent data loss or manipulation across government systems.

According to him, participants would undergo practical sessions on governance, risk and compliance, data protection impact assessments, encryption, data classification, data loss prevention, database security, cloud security and cyber incident response.

He added that the programme would culminate in the development of actionable implementation plans to strengthen data protection governance, improve security posture, reduce cyber risks, and ensure compliance with the NDPA across government institutions.

A new global Kaspersky Security Services report ‘Anatomy of a Cyber World’ reveals a blind spot in enterprise Security Operations Centers (SOCs): while performance is typically measured by detection and response speed, organisations rarely assess whether they’re detecting the right threats.

Large portions of collected telemetry don’t enter real-time detection pipelines, creating hidden gaps that internal assessments tend to miss – and fuelling demand for independent SOC Consulting to uncover them.

As organisations continue to invest in SOCs, measuring the real performance of these departments remains a challenge. Operational effectiveness depends not only on the volume of collected data, but on how well that data is used for detection.

According to a recent Kaspersky global survey, organisations typically evaluate SOC effectiveness through a limited set of key performance indicators: mean time to respond (MTTR) and detect (MTTD) dominate the picture, while deeper indicators like false positive rates or cost per incident remain secondary.

The real question is not just how fast the SOC responds, but whether it is detecting threats before they escalate.

The findings from the Kaspersky Security Services Global Report tell a consistent story: most SOCs are collecting far more data than they are using for detection.

The mean correlation rule coverage across assessed organisations stands at 43%, meaning that on average, active detection logic covers less than half of all ingested data sources.

The rest sits in the platform, available for retrospective investigation, threat hunting, or compliance purposes, but invisible to real-time detection.

This gap is not always unintentional. Some data is deliberately collected outside the scope of active correlation, serving investigation or regulatory requirements. But in many cases, sources are onboarded without a clear detection plan or with rule development deferred and never completed.

However, this is more typical of mature SOCs: in less mature environments, the data is often collected but never actually used.

There are several reasons for that, including sources onboarded ahead of planned rule development, compliance-driven collection without active correlation requirements, unclear internal ownership of detection logic, and resource constraints deferring engineering work indefinitely.

However, the result is the same either way: significant portions of the environment are effectively unmonitored in real time.

What makes this harder to solve is that the problem tends to grow with the organisation. SOCs managing the highest data volumes cover only around 30% of their sources with active detection logic.

As infrastructure expands, detection engineering capacity rarely scales at the same pace. The sources most consistently left without coverage are network telemetry, databases, and web servers – foundational infrastructure that should be at the core of any detection strategy.

The approach to detection logic itself varies widely. Around 50% of assessed SOCs rely primarily on vendor-provided rule sets, while roughly 40% build their logic from scratch. Vendor-reliant teams frequently face elevated false-positive rates and coverage gaps from insufficient tuning; those dependent on EDR carry blind spots where cross-source correlation is absent.

Meanwhile, a lot of organisations set their SOC’s detection scope at initial design and never revisit it, meaning blind spots accumulate silently as infrastructure evolves.

“Even with defined KPIs in place, assessing SOC effectiveness internally remains difficult due to insider view bias, which is why organisations are turning to external SOC Consulting to evaluate detection logic, analyse event flows and simulate attacks to understand what is actually being caught.

To improve, organisations should build a structured detection engineering process: a repeatable discipline for developing, validating and regularly reviewing detection logic,” comments Roman Nazarov, Head of SOC Consulting at Kaspersky.

To align internal processes and technologies with today’s evolving threat landscape, organisations can explore Kaspersky SOC Consulting, which helps build an in-house SOC from scratch, assess the maturity of an existing one, or enhance specific capabilities such as detection and response procedures.

In 2025, the most common consulting projects were SOC Technical Assessment (23.4%), SOC Framework Development (20%) and both SOC Maturity Assessment and SIEM Quality Assurance (11.7% each), reflecting a growing demand for deeper visibility into SOC performance.

To learn more about SOC detection effectiveness and practical steps to strengthen your security monitoring, read the full report.

The ‘Anatomy of a Cyber World’ is a comprehensive global report drawing on incident statistics from Kaspersky Managed Detection and Response, Kaspersky Incident Response, Kaspersky Compromise Assessment and Kaspersky SOC Consulting, shedding light on the most prevalent attacker tactics, techniques and tools, as well as the characteristics of detected incidents and their distribution across regions and industry sectors.

Nigerian Communications Commission (NCC) has identified Artificial Intelligence (AI) and the Internet of Things (IoT) as critical technologies for improving business efficiency, accelerating innovation and supporting Nigeria’s ambition to build a $1 trillion digital economy.

Aminu Maida, Executive Vice Chairman and Chief Executive Officer of the NCC, made this known at the 17th edition of Nigeria Communications Week and Africa’s Beacon of ICT Merit and Leadership Award held in Lagos.

Represented by Toluwalase Modele Rufai, Acting Controller of the NCC Lagos Office, Maida said AI and IoT had evolved from emerging technologies into powerful tools driving productivity, reducing operational costs and creating competitive advantages across multiple sectors.

Speaking on the theme, “Impact of AI and IoT on Business Operational Efficiency,” he described the technologies as indispensable to Nigeria’s economic transformation agenda.

“This year’s theme is not only timely but profoundly important. As Nigeria accelerates its journey toward a $1 trillion digital economy, Artificial Intelligence and the Internet of Things have moved from futuristic concepts to present-day drivers of productivity, cost optimisation and competitive advantage across every sector,” he said.

According to him, AI-powered predictive analytics is helping manufacturers anticipate equipment failures before they occur, reducing downtime and maintenance costs, while IoT-enabled sensors are improving agricultural productivity through real-time monitoring of soil conditions.

He added that connected technologies are transforming logistics and supply chain management by improving visibility, reducing delays, lowering operational costs and enhancing customer satisfaction.

“Across banking, healthcare, smart cities, manufacturing and governance, these technologies are streamlining operations, automating routine tasks and unlocking data-driven decision-making that was unimaginable just a decade ago,” he said.

Maida, however, stressed that the successful deployment of AI and IoT depends largely on the availability of resilient and high-capacity telecommunications infrastructure.

“At the heart of every AI and IoT deployment lies one critical enabler: resilient, high-capacity connectivity. Without secure, scalable broadband networks, the full promise of real-time data exchange, seamless device interoperability and intelligent automation remains unfulfilled,” he said.

The NCC boss said the commission was reviewing the Nigerian National Broadband Plan (NNBP) 2020–2025 to improve efficiency and sustainability within the telecommunications sector.

He disclosed that the commission was also engaging state governments to reduce Right-of-Way charges and administrative bottlenecks in order to accelerate fibre-optic infrastructure deployment nationwide.

According to him, the NCC has made harmonised spectrum resources available to support mobile broadband, fixed wireless access and IoT services, while the 2026–2030 Spectrum Roadmap is expected to create additional opportunities for broadband expansion and emerging technologies.

“With broadband penetration exceeding 52 per cent and growing 4G and 5G adoption, these efforts enhance efficient spectrum management, drive innovation, provide regulatory certainty and position Nigeria in line with global best practices,” he said.

Maida also highlighted the commission’s recently introduced General Authorisation Framework, which provides a regulatory sandbox for innovators to test AI, IoT, blockchain and other emerging technologies in a controlled environment.

He noted that the NCC had strengthened cybersecurity and consumer protection through initiatives such as the designation of telecommunications infrastructure as Critical National Information Infrastructure (CNII), adoption of a Zero-Trust cybersecurity framework and implementation of guidelines for secure AI and IoT deployment.

The NCC chief emphasised the need for collaboration among government agencies, regulators, operators, technology providers, academia and investors to address challenges such as inadequate power supply, skills shortages, data privacy concerns and consumer protection issues.

“The NCC remains fully committed to creating an enabling, predictable regulatory environment that attracts investment, spurs innovation and delivers inclusive growth,” he said.

Maida urged stakeholders to work collectively towards building a digitally empowered nation where AI and IoT technologies not only improve business efficiency but also transform lives, strengthen the economy and position Nigeria as a leader in Africa’s digital future.

The event brought together regulators, industry leaders, innovators and other stakeholders to discuss emerging trends, policy directions and technological innovations shaping Nigeria’s digital economy.