FG to launch cybersecurity framework to fight rising AI-driven assaults 

The Federal Authorities plans to roll out a brand new cybersecurity framework this yr to curb rising AI-driven cyberattacks on banks, companies and authorities companies.

That is in keeping with an announcement by the Director-Normal of the Nationwide Data Know-how Growth Company, Kashifu Inuwa Abdullahi.

The transfer comes amid rising considerations that fast digital adoption throughout Nigeria’s monetary and public sectors has outpaced current cyber defences.

What NITDA stated 

In keeping with Abdullahi, the cybersecurity framework, anticipated to be applied later this yr, would require organisations working in Nigeria to fulfill minimal cybersecurity spending thresholds.

He stated many firms at the moment underinvest in cybersecurity as a result of they assume they’re unlikely targets.

The framework will even introduce obligatory timelines for reporting knowledge breaches, techniques for sharing menace intelligence between the private and non-private sectors, and coordinated response protocols for main cyber incidents.

Authorities, he stated, are tightening cyber defenses as synthetic intelligence accelerates each the dimensions and class of assaults on banks, cost platforms and authorities networks globally.

Backstory

Nigeria’s deliberate framework follows a world shift towards stricter cybersecurity regulation. From the European Union to Africa, regulators are introducing harder breach-reporting necessities, obligatory danger controls and deeper information-sharing obligations as cyber threats intensify.

• The urgency is heightened in Nigeria because of the nation’s fast-growing digital financial system, which is house to main fintech firms similar to Flutterwave and OPay. Whereas these platforms have expanded monetary entry, they’ve additionally elevated the nation’s publicity to cybercrime.
• In keeping with a 2025 Nigeria Cybercrime Evaluation by the United Nations Workplace on Medicine and Crime, Nigeria misplaced an estimated N1.1 trillion throughout banks, telecommunications firms and authorities companies between 2017 and 2023.

The report famous that losses have continued to rise as assaults develop into extra complicated and cryptocurrencies are more and more used for cash laundering.

What consultants are saying

Bloomberg experiences that the monetary sector in Nigeria noticed a 150% surge in AI-driven assaults final yr, the chief government officer of Prembly, Lanre Ogungbe, a cybersecurity agency specialising in digital id and compliance options for monetary establishments, stated.

• Deloitte has additionally warned that ransomware and phishing assaults are anticipated to extend throughout Nigeria as extra companies, funds and information transfer on-line.
• The agency stated instruments and methods as soon as reserved for cybercriminals are actually extensively out there, making assaults simpler to launch and more durable to detect.
• A chief data safety officer at a number one Nigerian bank stated AI is now getting used to craft extremely personalised phishing messages, scan techniques for weaknesses and determine high-value targets, permitting attackers to bypass safety controls and unfold breaches extra rapidly throughout banks and fintech companies.

Ogungbe added that Nigeria’s immediate cost infrastructure has develop into a key vulnerability, as near-real-time transfers depart little room for fraud detection. He stated techniques now have solely seconds to analyse massive volumes of knowledge, distinguish reliable transactions from AI-driven malicious exercise and block suspicious transfers earlier than completion.

What it is best to know

In 2021, the Federal Authorities launched the Nationwide Cybersecurity Coverage and Technique to offer general course for shielding the nation’s digital house.

• The coverage units out broad ideas for coordinating cybersecurity actions throughout authorities and descriptions how establishments and residents ought to reply to and deter cyber threats.
• It’s meant to information nationwide efforts towards cybercrime and strengthen resilience, nevertheless it doesn’t impose particular, enforceable operational necessities on all organisations.
• On the sector degree, the Central Bank of Nigeria has beforehand issued danger‑primarily based cybersecurity pointers for monetary establishments, requiring banks and different regulated entities to adjust to minimal requirements to guard techniques and customer knowledge, recognising that rising cyber threats demand stronger defences.

As a part of Nigeria’s push to strengthen cyber defenses, the Nigerian Communications Fee (NCC) is growing a cybersecurity framework for the telecommunications business to safeguard Nigeria’s quickly rising telecom sector, which has expanded from fewer than 500,000 traces in 2001 to greater than 172 million lively subscribers and 141 million web customers.