Cyber Security Authority Director General Divine Selase Agbeti Mandates Strict Compliance to Secure Ghana’s Critical Infrastructure

The Cyber Security Authority (CSA) has announced a significant intensification of regulatory enforcement aimed at bolstering Ghana’s digital resilience and national security. Director General Divine Selase Agbeti emphasized that the national agenda to "reset" the country must be firmly anchored in accountability and strict adherence to cybersecurity standards. This move underscores the government's commitment, under the administration of President John Mahama, to treat the protection of critical infrastructure as a non-negotiable priority in an increasingly digitized global economy.

Central to this enforcement drive is the Directive for the Protection of Critical Information Infrastructure (CII). Under these regulations, designated owners of critical systems are now legally mandated to report cybersecurity incidents to the CSA within a 24-hour window. Furthermore, any identified vulnerabilities within these systems must be disclosed to the authority within 72 hours. To ensure the quality and integrity of cybersecurity interventions, the CSA has also stipulated that only licensed Tier 1 Cybersecurity Service Providers are authorized to offer services to these entities. Non-compliance with these directives will no longer be tolerated and may lead to rigorous enforcement actions.

Director General Agbeti underscored that safeguarding Ghana's critical infrastructure—which includes essential services such as banking, telecommunications, and energy—is vital for economic stability and public safety. By mandating these reporting and service standards, the CSA aims to create a proactive rather than reactive cybersecurity environment. As the nation continues its digital transformation, stakeholders across all sectors are urged to view these requirements not merely as regulatory hurdles, but as essential pillars for building a secure and trustworthy digital ecosystem for all Ghanaians.