Sophos, a global leader of innovative security solutions for defeating cyberattacks, today announced it has acquired UK-based Arco Cyber, a cybersecurity assurance company dedicated to helping organizations improve their security posture while staying ahead of compliance requirements and emerging threats.

Sophos

The acquisition is an important step in Sophos’ strategy to help organizations strengthen cybersecurity strategy and governance across all levels of maturity, delivered through the company’s global partner ecosystem.

Sophos refers to this as Sophos CISO Advantage, a set of capabilities designed to scale the knowledge, judgment, and operating discipline of a world-class CISO to organizations with or without dedicated security leadership, combining agentic AI, integrated platforms, and trusted human expertise delivered in partnership with managed service providers (MSPs) and managed security service providers (MSSPs).

Advances in agentic and AI-assisted systems now make it possible to deliver real-time insight into control performance, while remaining grounded in human oversight and judgment.

Arco Cyber accelerates this vision by adding capabilities that help organizations continuously validate whether security controls are effective, map controls to risk and compliance frameworks, and present clear, executive-ready insight that supports better decision-making.

“There is no shortage of exemplary security technology in the market,” said Joe Levy, CEO of Sophos. “What’s missing for most organizations is the ability to govern those tools, understand whether controls are actually working, and make informed decisions about risk. Arco has built a platform and a team that offers clarity, accountability, and proof.

“That work directly supports our strategy, and it gives customers a stronger foundation for simplifying compliance and managing cyber risk with confidence.”

A critical element of Sophos CISO Advantage is the role of MSPs and MSSPs in delivering these capabilities at scale. Most organizations rely on trusted partners to translate insight into action, provide context, and guide day-to-day decision-making.

Sophos CISO Advantage is designed to strengthen that relationship by equipping partners with AI-driven governance, continuous assurance, and clear risk insight, enabling them to deliver CISO-level leadership as a service.

This approach allows MSPs and MSSPs to elevate their role from technology operators to strategic security advisors, while giving customers greater clarity, control, and confidence in how cyber risk is managed.

Addressing a Leadership Gap in Cybersecurity

There are an estimated 359 million organizations worldwide, yet fewer than 32,000 have a Chief Information Security Officer (CISO).

Those with CISOs or other dedicated security leadership also require clear risk assessments, governance, prioritization, and demonstrability of security effectiveness to boards, regulators, and insurers.

“As cybersecurity matures beyond alerts and point solutions, organizations are increasingly focused on proving impact, not just activity,” said Phil Harris, Research Director, Governance, Risk and Compliance Solutions at IDC. “Boards, regulators, and insurers want clear evidence that security investments are reducing risk and strengthening governance. Platforms that integrate detection and response with assurance, advisory, and risk-based measurement are better aligned with how organizations actually operate.

“The Sophos and Arco Cyber combination represents a new category of platform-led cybersecurity that connects operations, assurance, and risk-based outcomes.”

For organizations with a CISO or similar leadership, Sophos CISO Advantage will provide a more efficient, integrated way to manage risk, track progress, and communicate outcomes. For organizations without one, it will deliver practical, CISO-level guidance that helps them take control of their security posture and decisions.

“Arco was founded to help organizations move from assumption to proof in cybersecurity,” said Matt Helling, CEO and co-founder of Arco Cyber. “By joining Sophos, we can deliver against that mission and reach far more customers who are struggling to demonstrate control effectiveness, prioritize risk, and justify security decisions.

“Sophos shares our belief that cybersecurity should deliver clarity, confidence, and control, not just data. Together, we can help organizations of all sizes turn security into a managed, defensible business discipline.”

Arco Cyber will join Sophos as a dedicated team to advance Sophos CISO Advantage. Its technology and expertise will be integrated into Sophos Central, the platform which delivers Sophos’ broader ecosystem including advisory services, managed detection and response (MDR), and partner-delivered services that enable MSPs and MSSPs to scale cybersecurity strategy for their customers.

By Blaise Udunze

For about a year now, millions of Nigerians relying on the internet to make a living have been groaning over the manipulation of airtime and data consumption that has turned into a relentless drain on household budgets. Painfully, individuals and businesses buying airtime or data increasingly feel less like paying for a service and more like entering a wager whose odds are permanently stacked against the consumer. Around the nooks and crannies of the country, across cities and rural communities alike, subscribers tell the same weary story of data that evaporates mysteriously, airtime consumed faster than reason allows, and customer care responses that sound rehearsed rather than responsive.

Inside Nigeria’s Telecom Exploitation Crisis Draining Household Budgets

The majority will agree that this collective frustration is not a coincidence, nor is it merely the product of careless smartphone use, because others might argue that there are several technical factors inducing rapid mobile data usage. Leave it or take it, it is the outcome of a broken ecosystem where multinational telecom companies wield immense power in an environment marked by weak institutional checks, limited transparency, and a population stretched thin by economic hardship.

The recent 50 per cent upward adjustment of telecom tariffs, later revised in policy conversations to 35 per cent, has intensified this tension, though it is not justifiable as exploitation. For millions of Nigerians already battling inflation, currency volatility, and shrinking purchasing power, the hike landed not as an economic necessity but as an additional burden. When communication costs begin to claim up to 15 per cent or, in some cases, nearly 30 percent of the national minimum wage, something fundamental has gone wrong. Access to communication is no longer a luxury; it is the infrastructure of modern survival. Yet the price Nigerians are now paying for this access is becoming socially and economically unsustainable.

A published report showed that as of January 2025, statistics from the Nigerian Communications Commission (NCC) disclosed that there were 141 million Internet users via the narrowband (GSM), while broadband penetration stood at 45 per cent. Data consumption has increased to 1,000,930.6 terabytes.

A review of the multinational telecom companies indicated that the new tariff for MTN’s revised data prices showed the 1.8GB monthly plan now goes for N1,500, against the previous 1.5GB plan priced at N1,000. The 20GB plan has been adjusted to N7,500, up from N5,500, while the 15GB plan now costs N6,500, rising from N4,500.

Under this new pricing regime, the same would be said of Airtel as it has replaced its cheapest monthly data plan of 1.2GB plan for N1,000 with 2GB plan for N1,500. For 3GB for N2, 000 (from 1.5GB at N1, 200), 4GB for N2, 500, formerly 3GB at N1, 500, and 8GB for N3, 000 (formerly 4.5GB at N2, 000). Other adjustments include 10GB for N4, 000 (formerly 6GB at N2, 500), 13GB for N5, 000 (from 10GB at N3, 000), 18GB for N6, 000 (formerly 15GB at N4, 000) and 25GB for N8, 000 as this replaces 18GB at N5, 000.
Further, the 75GB monthly bundle, which costs N16, 000 has been renamed as plan, costing N20, 000; 100GB for two months, costing N20, 000 have been upgraded to 150GB to cost N40, 000, while 400GB for three months, which cost N50,000 is now upgraded to 480GB to cost N120,000.

The bubble burst was further complicated tariff increase, which is the resurgence of widespread complaints about rapid data depletion. The issue is that businesses, students, families, and professionals are now raising alarms that data bundles, which previously lasted weeks, now disappear in days or even hours, which is questionable. Another critical area affected is small and medium-sized enterprises that rely on cloud services, digital marketing, logistics platforms, and online payments are finding their operating costs spiraling without any justification. For many, the crux of the matter is that profitability is being quietly eroded, not by poor business decisions, but by the rising cost and unpredictability of connectivity.

The telecom operators, backed by the regulator, have responded with familiar explanations that have always favoured their unscrupulous and illicit activities, with the explanation that data, they say, depletes faster because of background applications, automatic updates, high-definition streaming, malware, faster networks, and users’ failure to manage device settings. Technically, these explanations are not false because modern smartphones are indeed data-hungry, and digital behaviour has evolved. But this defence, repeated endlessly, misses the deeper issue, as the fact is that the problem Nigerians are confronting is not simply that data is consumed; it is that the system governing how data is measured, billed, and explained is not transparent, hard to understand, unaccountable, and tilted entirely in favour of the service providers.

In Nigeria’s telecom market, operators are both the umpires and the players. They measure usage, bill customers, interpret anomalies, and adjudicate complaints, which does not create ground for fair play. Subscribers, on the other hand, are expected to accept consumption figures hook, line, and sinker, which they cannot independently verify. An unacceptable fact is that there are no universally accessible, third-party audited data meters that allow users to confirm what they have truly consumed in real time. Customers and service providers do not have equal access to information; this asymmetry creates fertile ground for silent overbilling, whether intentional or structural, and it erodes trust in a sector that should be built on transparency not obscurity.

One critical aspect that must be addressed squarely is that the regulatory weakness compounds the problem. While the Nigerian Communications Commission possesses statutory authority, enforcement has often appeared slow, reactive, and insufficiently punitive. Penalties imposed on multinational firms with billion-dollar balance sheets rarely feel consequential. Investigations drag on, public disclosures are limited, and even when infractions are established, consumers seldom receive refunds. In such an environment, corporate restraint becomes optional. Where regulators lack teeth, corporations inevitably test boundaries.

The market structure itself offers little relief as the market setup does not protect consumers. Nigeria’s telecom sector is effectively oligopolistic, dominated by a few large powerful players with similar pricing models and limited incentive to compete on fairness. Tariff structures are deliberately complicated and complex, with multiple conditions and layered with bonuses, rollover conditions, expiry clauses, and promotional data that behaves differently from paid data. For the average subscriber, understanding these distinctions is exhausting. Complexity becomes a strategy, not an accident, reducing accountability while increasing revenue certainty for operators.

Though economic pressure on the telecom companies is real, and it must be acknowledged, knowing fully well that exchange rate volatility, energy costs, vandalism, and inflation have hurt profitability. Airtel’s revenue decline and MTN’s reported losses underscore the financial strain facing operators in Nigeria’s macroeconomic climate. It must be understood that corporate hardship does not justify consumer exploitation. The risk arises because multinational firms are subjected to pressure to meet global revenue targets and repatriate profits, adopt aggressive monetisation strategies in markets where regulation is weak and consumer resistance is fragmented.

From experiences thus far, the human cost of this imbalance is becoming impossible to ignore. From students like Abiodun Yusuf, who spends most of his allowance on data that barely supports his academic needs, and also to small business owners like Cynthia Jude, whose online shop struggles to stay viable, the stories repeat themselves with unsettling consistency and outcomes. Families ration children’s screen time not out of discipline, but out of financial desperation. The adverse part that has continued is the widening of an already dangerous digital divide, as rural communities withdraw from digital platforms altogether because of exploitation.

Perhaps most telling is how quickly exploitation has been normalized in Nigeria. Many Nigerians now shrug and say, “That’s how it is.” This resignation is the greatest victory for an unfair system and when people stop believing that fairness is possible, for this reason, exploitation becomes invisible, and abuse thrives without resistance.

Consumer advocacy groups like NATCOMS have begun to signal a shift in posture, including the possibility of court action. Labour unions have threatened boycotts. Civil society organisations warn of social and economic repercussions. These responses indicate that public patience is wearing thin. If left unaddressed, subscription apathy, however gradual, could ultimately undermine the very growth the telecom sector seeks to protect.

For a better understanding of what Nigeria faces is not merely a dispute over megabytes and tariffs, for clarity, it is a governance challenge that cuts across corporate ethics, regulatory independence, consumer empowerment and economic justice. A digital economy cannot thrive on distrust. Transparency and easily understandable data billing must become mandatory, not an aspirational goodwill promise. Independent audits should be public, regular, and credible. Complaint resolution mechanisms must be simplified, fast, and binding. Regulators must act not as mediators between equals, but as defenders of the public interest in an asymmetrical power relationship.

Equally important is consumer education, but awareness campaigns alone cannot substitute for structural reform. Digital literacy must go hand in hand with corporate accountability because the better it is understood that teaching users how to conserve data does not absolve operators from the responsibility to bill fairly and transparently.

At its core, the telecom debate reflects a large Nigerian dilemma, if not a broader problem in Nigeria, as corporate power has grown faster than institutional strength. Until regulators are truly independent and totally free from corporate and political influence, transparency is enforced by law, and consumers are recognized and treated not as passive revenue streams but as stakeholders with rights, exploitation will remain systemic rather than accidental or a series of isolated mistakes.

Communication is the bloodstream of modern society. When access to it becomes exploitative, the cost is paid not only in naira but in opportunity, dignity, and trust. Nigeria must decide whether its digital future will be built on fairness that respects consumers or allow it to rest on fatigue, frustration, and exploitation of users. The choice Nigeria makes will make more impact and the answer will shape not just the telecom sector, but the credibility of governance in an increasingly connected nation.

Blaise, a journalist and PR professional, writes from Lagos and can be reached via: [email protected]

Central Bank of Nigeria (CBN)and the Nigerian Communications Commission (NCC) have proposed that customers must receive refunds within 30 seconds for failed airtime and data purchases to curb persistent billing complaints in the telecommunications sector.

This was indicated in the Exposure Draft of the Joint CBN–NCC Framework for Resolution of Failed Airtime and Data Purchase Transactions, which was published on the website of the CBN on Monday.

The landmark exposure draft, dated 5 February 2026, seeks to “institutionalise clear accountability” and establish a “coordinated approach to consumer redress” across the financial and telecommunications sectors.

The most significant shift in the proposed framework is the introduction of standardised, automated timelines for resolving failed transactions.

Currently, Nigerians often face long delays when airtime purchases fail at the bank, aggregator, or Mobile Network Operator level.

To solve this, the regulators have proposed a 30-second window for automated reversals. Section 6.0 (ii) of the draft exposure, which dwelt on failed transactions, especially as it relates to unfulfilled airtime/data delivery, proposes a time to refund the purchaser of 30 seconds “if the transaction failed at the bank level… Failed transaction delivery from NCC Authorised Licensees… Failed transaction delivery from MNO to the NCC Authorised Licensee.”

The draft emphasised that stakeholders must “automate reversal processes across all stakeholders” to ensure that refunds require no human intervention from the customer.

The draft exposure also stated that “all parties involved in airtime and data transactions shall take the following actions to ease usage and facilitate consumer satisfaction: a. Stakeholders must immediately connect ONLY to relevant authorised licensees of the NCC and CBN. b. MNOs and banks must only connect to NCC Authorised Licensees/MNO digital channel partners for airtime and data vending… Notifications of failure create final settlement obligations between MNO and NCC-authorised licensees… The NCC and CBN will audit stakeholder compliance jointly or individually at quarterly or other intervals as may be determined.”

From a business and oversight perspective, the regulators are proposing a Central Monitoring Dashboard to be hosted jointly by the CBN and NCC, which will track reversals, Service Level Agreement breaches, and customer complaints in real-time.

“There shall be a Central Monitoring Dashboard hosted by CBN/NCC for tracking reversals, SLA breaches, and customer complaints. This will facilitate the establishment of a real-time national ‘Failed Transactions Dashboard’ with a uniform error code with end-to-end visibility across the value chain’, read the draft exposure.

This is designed to eliminate the “unclear ownership of liability” that often occurs when banks and telcos blame each other for failed recharges. To support this, banks and MNOs will be required to maintain and share daily reports of successful and failed cases.

The proposed framework also addresses the common problem of “lost” money when customers recharge ported phone numbers. The draft mandates that MNOs must validate a phone number against the ported number database before processing any recharge. If the system identifies a number as ported out or invalid, it must “proactively stop recharges” and send a failure code back to the bank to ensure the customer is not debited.

For erroneous recharges sent to the wrong person, the framework sets clear protocols: below N20,000, MNOs will request the recipient’s consent before a reversal, and when it is above N20,000, an affidavit of indemnity or notarised letter is required to process the recovery.

The CBN and NCC in the exposure draft signalled they will take a firm stance on compliance. Both agencies will conduct joint quarterly audits of all stakeholders, including banks, payment service providers, and MNOs, to verify compliance with the new rules. The regulators have warned they will “impose penalties for any breach” of the framework’s provisions.

Banks and other financial institutions have until 10 February 2026 to submit their inputs on the draft before it is finalised. Once implemented, the framework is expected to significantly restore “subscriber trust” in Nigeria’s digital financial ecosystem.