Nigeria Deepens Cybersecurity Efforts as Cybercriminals See More Profits

Nigeria has introduced mandatory incident reporting rules for critical sectors, requiring disclosure timelines, sector-specific thresholds, penalties for non-disclosure, and coordination with ngCERT; the report frames this regulatory shift against a maturing African cybersecurity landscape and a prolific local threat environment characterized by BEC, romance fraud/pig-butchering, growing ransomware activity, and distribution of commodity infostealers (e.g., AgentTesla, FormBook, Remcos). It recommends that organizations review incident response plans, map Nigerian data flows, engage with regulators, and assess supply-chain risk to meet the new obligations.