Nigeria strengthens cyber defence framework as government moves to align public–private response, probe financial sector data breach claims

CYBER SECURITY

By Felicia Nwosu

The Federal Government of Nigeria is advancing a more coordinated national response to rising digital security threats by simultaneously setting up a multi-stakeholder cybersecurity coordination platform and opening a regulatory investigation into suspected breaches within parts of the financial services ecosystem.

Together, these actions signal a clear shift toward faster collaboration, stronger oversight, and shared accountability across the country’s expanding digital economy.

Meanwhile, atthe centre of this renewed strategy, Bosun Tijani, Minister of Communications, Innovation, and Digital Economy, outlined a policy direction that places collective vigilance at the heart of national cyber resilience.

So, rather than relying solely on government-led enforcement, the administration is now deliberately positioning cybersecurity as a cooperative national project involving regulators, businesses, and civil society actors working side by side.

ALSO WATCH:MARKETING EDGE AWARDS

Consequently, through this platform, the government intends to strengthen information sharing, improve response alignment, and accelerate threat intelligence exchange across industries that support Nigeria’s digital backbone.

Specifically, the Council will pursue three priority goals. First, it will strengthen the country’s capacity to withstand increasingly sophisticated cyberattacks by promoting coordinated preparedness across both public and commercial networks.

Next, it will sharpen early-warning capabilities by encouraging faster threat detection across interconnected systems nationwide. Finally, it will deepen long-term collaboration by creating structured engagement channels that bring technology companies, regulators, civic institutions, and enterprise operators into a shared protection framework for critical digital assets.

Emphasising the urgency of this direction, the minister stressed that safeguarding the country’s digital ecosystem cannot rest on government agencies alone. Instead, he explained that Nigeria must rely on trusted partnerships, proactive cooperation, and continuous monitoring across sectors to secure its rapidly expanding innovation economy.

While policymakers strengthen future coordination structures, enforcement authorities are already intensifying oversight of existing compliance obligations.

In parallel with the Council’s formation, the Nigeria Data Protection Commission has formally launched an investigation into an alleged data exposure incident involving Remita Payment Services Ltd and Sterling Bank, signalling a firm regulatory stance on privacy accountability within the financial technology environment.

ALSO WATCH:MARKETING EDGE AWARDS

Providing details on the regulatory action, Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the Commission, confirmed that authorities issued a Notice of Investigation on April 1, 2026, thereby activating a structured review process to determine whether compliance gaps contributed to the suspected incident.

As the inquiry progresses, investigators are examining multiple dimensions of the case simultaneously. They are identifying the categories of personal information potentially affected, assessing the scale and structure of the suspected breach, and evaluating the level of exposure faced by impacted individuals.

In addition, regulators are reviewing the adequacy of containment actions already taken by the organisations involved. At the same time, they are conducting broader compliance checks to confirm whether operational safeguards align with national data protection standards.

Importantly, regulators are not limiting their attention to the institutions already named. Instead, Vincent Olatunji, National Commissioner and Chief Executive Officer of the Commission, has directed a wider ecosystem review covering additional actors within the digital payments value chain. Through this expanded scope, the Commission aims to reinforce trust across Nigeria’s fast-growing electronic transaction landscape.

This enforcement activity draws authority from the Nigeria Data Protection Act 2023, which requires organisations operating digital platforms to deploy strong technical safeguards alongside structured organisational controls capable of protecting user information from compromise.

Consequently, regulators are signalling clearly that institutions failing to maintain these protections will face closer scrutiny as part of broader efforts to preserve confidence in the country’s digital marketplace.

In the same way, the government’s twin actions launching a coordination council while advancing regulatory investigations demonstrate a deliberate strategy shift.

Rather than reacting only after incidents occur, authorities are now strengthening prevention systems, tightening compliance oversight, and mobilising cross-sector partnerships to protect Nigeria’s digital infrastructure more proactively and more decisively. 🚀