Connect with us

General News

Nigeria Cyberspace Neglected, Unprotected Territory- Onifade

Published

on

Opeyemi Onifade, president, Information Systems Audit and Control Association [ISACA] Abuja chapter,
Kindly share this post

As the use of IT becomes pervasive, government, large corporations and private organizations are daily combating cyber security.
In this encounter with Opeyemi Onifade, president, Information Systems Audit and Control Association [ISACA] Abuja chapter, examine the trend. Excerpts.     

How Big is Cyber Security Threats in Nigeria
Nigeria as a member of the global society and the country cannot be insulated from the opportunities and threats of globalization. Now, the use of IT is pervasive.
Many organizations in Nigeria are leveraging on the Internet to transact and interact with customers, employees, suppliers and partners. The internet has become imperative to address our collective capacity to respond to the inevitability of cyber threats, especially Advanced Persistent Threats [APT].
Primarily, the purpose of the majority of APTs is to extract information from systems—this could be critical research, enterprise intellectual property or government information, among other things.
Talking about the shift in the motive for hacking (i.e. compromising the security profile of information systems), you will find that there is an evolution in the motivation for attacks.
Motivation for attacks can be explained as being attacked because you are on the Internet and you have vulnerabilities. Or because you are on the Internet and you have information of value; or because your former or current employee seeks financial gain from selling your intellectual property (IP) or because of who you are, what you do or the value of your IP.
And these include state-sponsored attacks and corporate espionage. According to recent research, Cybersecurity is a top global concern. 82% of enterprises are expected to experience a cyber incident in 2015.

Businesses and Government Preparing for the Current Threat
Financial industry players like banks have strengthened their cyber resilience through implementation of adequate technology, adoption of process-oriented good practices and standards, and engagement of right skills and competencies.
However, our government needs to consider a special vehicle to establish the framework to address cybersecurity issues strategically, tactically and operationally.
This is because cybesecurity is a security issue, in fact a national security concern.
We need to understand that we cannot succeed by accident. The cyberspace is now recognized as the fifth domain of warfare in addition to land, air, sea and space.
Unfortunately, in Nigeria, our cyberspace domain is still a neglected and unprotected territory.
Yet, we have come to depend so much on mobile telecommunications, electronic banking and e-commerce for our socioeconomic survival.
In specific terms, there is a need for the government to declare an emergency in the cybersecurity education domain of the country in order to promote cyber security expertise and create a formidable “army” that will be able to ensure effective national cyber defense.
The University Commission needs to update curricula development and accredit information security courses in our tertiary institutions.
Standards Organization of Nigeria needs to domesticate the information security related international standards. NITDA needs to wake up to her responsibilities as the governing body for IT-related security issues in the country.
This is an unfamiliar territory to government bureaucracy and the bureaucrats need to have the humility to collaborate with the professional bodies like ISACA with over 2000 credentialed Nigerian members in the interest of security of the country and wellbeing of her citizens.

Where Does ISACA Fit into all of These?
ISACA provides practical guidance, benchmarks and other effective tools for all enterprises that use information systems.
Through its comprehensive guidance and services, ISACA defines the roles of information systems governance, security, audit and assurance professionals worldwide.
The COBIT framework and the CSX, CISA, CISM, CGEIT and CRISC certifications are ISACA brands respected and used by these professionals for the benefit of their enterprises.
Nigerian banks depend on our members to man their audit, risk, e-business, operations and strategy department. CBN guidelines to the banks require them to use ISACA’s framework to align IT with Business strategy.
To become a member, you are required to register as a professional or student member.
Membership gives you access to vast educational opportunities and international networks.
Members are supported to earn professional credentials upon passing relevant exam and demonstrating verifiable work experience.
ISACA operates three chapters in Nigeria- Abuja, Lagos and Ibadan.  There are over 2000 members resident in Nigeria at the last count.

How can ISACA Enable Proven Best Practices to Reduce the Attack Surface, and Mitigate Risks?
For over 40 years, ISACA has promoted trust in, and value from information systems. ISACA has published frameworks and standards related to information assurance, information security, risk management, and corporate governance of IT.
We have been a global thought-leader on these issues.
In 2015, ISACA commenced a skill-based credentialing programme, Cybersecurity nexus CSX to develop and validate cybersecurity competencies. 
This programme is in recognition that the most advanced of cyber attacks are done by people and the defense side needs to have adequate competencies to reduce or eliminate opportunities for successful attacks.
ISACA provides access to the knowledge and competencies for cybersecurity in over 180 countries of the world.
ISACA Abuja chapter will be 10 years this year. What are your plans to commemorate this?  What are the preparations for the up-coming annual conference?
As part of our contribution to promoting the right use of information technology in the country, ISACA Abuja Nigeria has been hosting annual international conferences. The seventh edition coincides with our 10th anniversary.
This conference theme is “CYBERSECURITY: Aligning Nigeria with the rest of the World”. The Chief Information Security Officer of the City of Atlanta,
USA has accepted our invitation to be the keynote speaker. We are also drawing speakers from other parts of the world and from within the country.
As a social responsible professional body, we shall be donating IT-related books to tertiary institutions and libraries in Abuja.
We have also planned a free seminar for students of tertiary institutions interested in cybersecurity profession.
The platform is meant to provide mentorship to future cybersecurity professionals. To commemorate our 10th anniversary, we will be signing MOU with organizations that believe in our cause to make our cyberspace safe across the country and region.

Nigeria Security Professionals and Requisite Training to Build Strong Core Infrastructure, to Combat Digital Security Threats
According to CISCO, there are over one million unfilled jobs for information security roles worldwide. Another research estimates that more than 35% of enterprises are unable to fill open cyber security positions.
I believe security professionals in Nigeria have not been able to gain the recognition they deserve and so they have not been able to express themselves through hands-on contributions to the economy and national security. Sadly, there is currently an incessant loss of our cyber security professionals to opportunities in the Middle-East economies.
The brain drain will continue until we create an atmosphere to retain these skills. It happened to nursing and medical professionals in the 80’s, it is happening again to our cyber security professionals.
I think there are numerous opportunities for self-development for our professionals, but businesses and all tiers of government must begin to look to our citizens for cyber protection in order to fully engage and truncate the brain drain in the cyber security industry.
I wish to suggest that government agencies and businesses should be involved in sponsoring cybersecurity events for professionals and students.
An example is the cyberlympics organized by ISACA International. President Buhari will need to find a means to drive the cybersecurity agenda for the nation.
Recently the US President issued an executive order on cyber security earlier in the year and the UK government recently made public her National Cyber Security Strategy.

Legislation and Fight Against Security Threats and Cybercrime
Thankfully, the cybercrime bill was passed into law this year and there are attempts by the Office of National Security Adviser to promote a national strategic framework for cybersecurity.
While that is a good step forward, we are still very unserious in providing a legal framework for governing our cyberspace.
I mentioned earlier that our cyberspace is a neglected territory. Our laws should attempt to make Nigeria one of the most secure places to do business.
Until recently, Amazon.com would not ship to Nigeria. Paypal would not do business with Nigeria at all. While these organizations have modified their business models for Nigeria, their service package for Nigeria is still limited.
This means that Nigerians are unable to take full advantage of international e-commerce. For instance, while a Nigerian can pay using the global payment platform, paypal, she cannot receive payment using the same platform.
We need laws that will enable e-business not just punish cyber misdemeanor.
We are hoping that the members of the eight National Assembly will be open to working with experts in non-profit organizations like ISACA to help with research and case studies to make our laws appropriate and relevant to 21st century realities.

What can CISO do to Become very Prominent in Organisations?
The role of a CIO is to create value from the information asset of the organization while a CISO’s role is to preserve the value of the organization’s information asset. Information has become the most important factor of production over land, labour and capital.
Therefore, information security is really about business security. The CEO is the one who will be held accountable for the protection of the most important productive asset of the organization, i.e. the information assets.
He can delegate this responsibility to a CISO but he cannot delegate the accountability.  A CISO therefore needs to recognize his role as someone responsible for business resilience and performance. His role is not just to implement controls but also to ingrain the enablers of business strategic outcomes.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

General News

NITDA DG Reaffirms Nigeria–U.S. Partnership on Data Privacy, AI and Cybersecurity

Published

on

Kindly share this post

Kashifu Inuwa Abdullahi, Director General of the National Information Technology Development Agency (NITDA), has reaffirmed Nigeria’s commitment to strengthening collaboration with the United States in building a secure, trusted, and resilient digital ecosystem, with a particular focus on data privacy, artificial intelligence, cybersecurity, and capacity building.

NITDA DG Reaffirms Nigeria–U.S. Partnership on Data Privacy, AI and Cybersecurity

NITDA

He stated this while delivering an address at the Nigeria Data Privacy Capacity Building Workshop organised by the United States Department of State, in collaboration with the Nigerian Mission and relevant stakeholders in the digital ecosystem.

Expressing his excitement at the engagement, Inuwa described the workshop as a strong revalidation of the long-standing partnership between Nigeria and the United States in advancing the country’s technical and digital systems.

According to him, the collaboration is not a new initiative but part of a growing and deliberate effort by both countries to jointly address emerging digital challenges and opportunities.

Inuwa recalled that in April 2024, Nigeria and the United States, through the U.S.–Nigeria Binational Commission, agreed to work together on key areas including data privacy, artificial intelligence, cybersecurity, capacity building, and other aspects of digital development.

He further noted that the same year witnessed the successful hosting of an Artificial Intelligence Conference, co-hosted by the Nigerian Government and the U.S. Mission in Nigeria, as well as Nigeria’s participation in engagements with U.S. cybersecurity companies to explore partnerships aimed at strengthening Nigeria’s technical ecosystem.

He explained that NITDA’s emphasis on data privacy, AI, cybersecurity, and policy is anchored on one central objective: building trust in the digital ecosystem, adding that trust is a critical enabler of digital transformation, as its absence slows down innovation and increases costs, while its presence accelerates progress and reduces barriers to growth.

The NITDA Boss stressed that building a prosperous digital economy requires deliberate efforts to safeguard data privacy, strengthen security frameworks, and deploy AI responsibly.

He noted that artificial intelligence relies on data, data demands privacy, and privacy can only be guaranteed through strong security, making it impossible to address these issues in isolation.

Inuwa described the workshop as the beginning of broader engagements and deeper collaboration in other strategic areas, particularly as Nigeria continues to position itself as a key player in the global digital economy.

He disclosed that following the participation of the U.S. Mission in Nigeria’s National Cybersecurity Conference last year, plans are underway to expand the conference into an international cybersecurity platform this year.

According to him, the international conference will provide an opportunity for U.S. cybersecurity companies to showcase their technologies, explore partnerships with Nigerian firms developing local cyber solutions, and jointly strengthen Nigeria’s cybersecurity ecosystem.

Inuwa also reassured partners and stakeholders of NITDA’s commitment to building the right policies and enabling environment for innovation to thrive.

He noted that Nigeria, alongside Africa, represents the next frontier of the digital economy, driven by a young, digital-native population and a large, expanding market.

He said that while many public and private sector organisations in Nigeria rely on U.S. technologies to build their digital systems, the country also possesses significant local talent capable of developing homegrown solutions to address national and regional challenges.

He added that NITDA remains committed to working with international partners to build local capacity and promote Nigeria’s digital self-determination.

According to the DG, digital technology is no longer optional, as it represents the future of economic growth and development, and no nation can afford to be left behind.

He emphasised that the only way to fully harness the opportunities of the ongoing AI revolution is by safeguarding privacy, establishing sound policies, and laying a strong digital foundation capable of supporting rapid technological advancement.

He appreciated the U.S. Department of State and the U.S. Mission in Nigeria for their continued partnership and support, expressing optimism that the collaboration will be further strengthened to explore new areas of cooperation, particularly in cybersecurity and artificial intelligence, for the mutual benefit of both countries.


Kindly share this post
Continue Reading

General News

Falana Wins $25,000 Damages from Meta over Fake Illness Video

Published

on

Kindly share this post

Lagos High Court at TBS has awarded $25,000 in damages in favour of Mr. Femi Falana (SAN) in his $5 million lawsuit against Meta Platforms Inc., the US-based technology company owned by Mark Zuckerberg, over the alleged invasion of his privacy.

Falana Wins $25,000 Damages from Meta Over Fake Illness Video

Early in 2025, a video was published on Facebook claiming that Falana was suffering from a terminal illness, which prompted the suit

Delivering judgment on Tuesday, January 13, Justice Olalekan Oresanya held that a global technology company such as Meta, which hosts pages for commercial benefit, owes a duty of care to persons affected by content disseminated on its platform.

Falana, through his lawyer, Mr. Olumide Babalola, accused Meta of publishing motion images and voice captions titled “AfriCare Health Centre” on its platform, suggesting that he suffered from a disease known as prostatitis.

He argued that the publication constituted an invasion of his privacy as guaranteed under Section 37 of the Constitution of the Federal Republic of Nigeria, 1999 (as amended).

Falana said the false video about his health status had tarnished his image and reputation built over the years.

He also contended that the publication, which he described as false, offensive and disturbing, painted him in a false light and caused him mental and emotional distress.

In its judgment, the court rejected the argument that digital platforms can rely solely on “hosting” or “intermediary” defences where the platform monetises content and the harm arising from misinformation is reasonably foreseeable.
Falana’s lawyer said the decision reinforces a standard of platform accountability under Nigerian law, aligning with emerging global jurisprudence.

The court further held that “the fact that the applicant is a public figure does not rob him of his right to privacy.” It found that the publication of false medical information intruded into the claimant’s private life, regardless of his public standing.

Babalola said the finding settles an important misconception in Nigerian legal practice and affirms that health data enjoys heightened protection, even for public figures.

The court also held that Meta determines the means and purposes of processing content, monetises pages, and controls distribution algorithms, thereby acting as a joint data controller with page owners.

Consequently, Meta was held vicariously liable for the offensive video.

Babalola said: “This is a major development under the NDPA and weakens the ‘mere platform’ defence traditionally relied upon by Big Tech.”

The court further ruled that Meta breached Section 24 of the NDPA by processing personal data that was inaccurate, harmful, lacked a lawful basis and was unfair to the learned Senior Advocate. The false health information was held to amount to unlawful processing per se.

It emphasised that where the risk of inaccuracy is foreseeable, particularly in relation to sensitive personal data, a platform owes a heightened duty to ensure accuracy and integrity.

The court held that Meta failed to deploy adequate safeguards to prevent or mitigate the harm.

As a global technology company with vast resources, Meta was expected to implement effective content-review mechanisms, rapid takedown processes and safeguards proportionate to the risks posed by misinformation. Its failure to do so, the court held, amounted to regulatory non-compliance.


Kindly share this post
Continue Reading

General News

Paradigm Initiative Condemns the Internet Shutdown and Media Restrictions in Uganda Ahead of the 2026 General Election

Published

on

Kindly share this post

Paradigm Initiative (PIN) strongly condemns the internet shutdown implemented in Uganda ahead of Thursday’s general election, as well as the restrictions placed on media coverage of protests and demonstrations. These actions constitute serious violations of digital rights, media freedom, and democratic principles at a critical moment in the country’s electoral process.

Paradigm Initiative Condemns the Internet Shutdown and Media Restrictions in Uganda Ahead of the 2026 General Election

Internet Shutdown

Evidence indicates that internet access across Uganda has been disrupted, affecting social media platforms, messaging services, and online news outlets.

This development comes despite earlier public assurances by the Uganda Communications Commission that the government did not intend to shut down the internet during the elections.

The shutdown represents a troubling reversal of that commitment and raises serious concerns about transparency, accountability, and respect for fundamental rights.

Uganda has a well-documented history of internet shutdowns during elections, including during the 2016 and 2021 general elections. In 2021, a near-total internet blackout lasted several days, severely undermining freedom of expression, access to information, election observation, media reporting, and economic activity.

Repeating these measures despite widespread national, regional, and international condemnation demonstrates a continued pattern of using digital restrictions as a tool of election management.

Paradigm Initiative further condemns directives preventing media houses from covering protests or demonstrations during this period. Such restrictions violate media freedom and the public’s right to receive information, and undermine the role of the press as a democratic watchdog. Suppressing coverage of protests fuels misinformation, heightens tension, and erodes public trust in the electoral process.

Article 29 of the Constitution of the Republic of Uganda guarantees the rights to freedom of expression, freedom of the press and other media, and access to information. Uganda is also a State Party to the International Covenant on Civil and Political Rights (ICCPR) and the African Charter on Human and Peoples’ Rights, which protect these rights under Articles 19 and 9, respectively.

Any restriction on these rights must meet the strict tests of legality, necessity, proportionality, and legitimate aim. Blanket internet shutdowns and platform restrictions fail these tests and are incompatible with Uganda’s constitutional and international obligations.

At the international level, the United Nations Special Rapporteur on the promotion and protection of the right to freedom of opinion and expression, together with other UN Special Procedures mandate holders, has consistently affirmed that internet shutdowns are inherently disproportionate and can never be justified under international human rights law, including during elections, protests, or periods of political tension.

The African Commission on Human and Peoples’ Rights has recently issued a specific call urging the Government of Uganda to keep the internet on and to respect freedom of expression and media freedom during the current electoral period.

This call builds on established African human rights standards, including Resolution 580 on Internet Shutdowns and Elections in Africa and Principle 38 of the Declaration of Principles on Freedom of Expression and Access to Information in Africa, which prohibits States from interfering with access to digital technologies.

Internet Service Providers and technology companies operating in Uganda also bear responsibility under the UN Guiding Principles on Business and Human Rights to respect human rights, ensure transparency, and avoid complicity in unlawful or disproportionate restrictions on connectivity.

Paradigm Initiative calls for:

The immediate restoration of full internet access across Uganda and an end to all forms of digital disruption during and after the electoral period.

The withdrawal of all directives restricting media coverage of protests, demonstrations, or political developments during elections.

Accountability from Internet Service Providers, including the publication of transparency reports to users detailing government orders affecting internet access.


Kindly share this post
Continue Reading

Trending