Cybersecurity Authority to sanction unlicensed service providers

The Cybersecurity Authority (CSA) is poised to sanction service providers in Ghana who fail to obtain licenses by January 2025.

The sanctions include legal repercussions, including administrative fines and criminal prosecution, under the relevant industry regulations.

The CSA has already begun taking action by issuing regulatory notices to institutions providing cybersecurity services.

Dr. Albert Antwi-Boasiako, Director-General of the CSA, issued this warning during a ceremony in Accra last Friday, where certificates and accreditations were awarded to several service providers.

Among those recognized were 13 cybersecurity service providers (CSPs), three cybersecurity establishments (CEs), and 58 cybersecurity professionals (CPs).

On March 1, 2023, the CSA introduced a regulatory framework under the Cybersecurity Act, 2020 (Act 1038), which includes provisions for licensing CSPs and accrediting CEs and CPs. 

The aim of the framework is to ensure that these entities operate in accordance with established standards, aligning with both local requirements and global best practices. This regulatory approach seeks to enhance cybersecurity measures, promote consumer safety, and address national security concerns.

To date, the CSA has registered 276 CSPs, 73 CEs, and 1,563 CPs, though many of these professionals are still in the process of completing their applications.

Dr. Antwi-Boasiako emphasized the importance of meeting required standards, particularly in critical infrastructure sectors such as electoral systems and networks, due to the sensitive and potentially intrusive nature of cybersecurity services.

He further stated that after over a year of collaborative engagement with service providers, the CSA would be forced to take legal action against those who fail to comply with the regulations.

The CSA will continue to assist CSPs, CEs, and CPs by building their capacity and ensuring their services align with international standards. In support of this, the authority has launched the Industry Forum under Section 81 of Act 1038, offering a platform for stakeholders to exchange ideas, shape policy, and raise industry standards.

In addition, Dr. Antwi-Boasiako announced the establishment of independent assessors who will assist the CSA in executing its regulatory duties like conducting site inspections and audits and contributing to research and development efforts.