Nigerian Telecoms Required to Allocate Cybersecurity Budgets

• •NCC mandates dedicated cybersecurity budgets for Nigerian telecom operators.
• •Compliance will be audited periodically to ensure alignment with risk strategies.
• •Operators must appoint Chief Information Security Officers and report incidents quarterly.

The Nigerian Communications Commission (NCC) has mandated that telecom service providers allocate dedicated budgets for cybersecurity as part of its Cyber Resilience Framework. This directive applies to major operators including MTN Nigeria, Airtel Nigeria, and Globacom. The NCC's updated Guidance Note emphasizes that cybersecurity funding must be a board-level financial responsibility, reflecting the increasing cyber risks to Nigeria's digital infrastructure. Compliance will be subject to periodic audits, and service providers are required to appoint Chief Information Security Officers to oversee cybersecurity initiatives. The NCC estimates that Nigeria loses over $500 million annually to cybercrime, highlighting the urgency of this mandate. Operators must also report cybersecurity incidents quarterly and conduct cybersecurity awareness sessions for staff and customers. This initiative aims to align financial resources with corporate risk strategies and enhance overall cyber resilience.