CSA Director General Divine Selase Agbeti Mandates Strict Compliance to Safeguard Ghana's Critical Digital Infrastructure

The Director General of the Cyber Security Authority (CSA), Divine Selase Agbeti, has issued a firm directive calling for heightened regulatory compliance and accountability to strengthen Ghana’s national cyber resilience. Emphasizing that the vision of 'resetting Ghana' must be grounded in a culture of adherence to security standards, the CSA has announced plans to intensify enforcement of the Directive for the Protection of Critical Information Infrastructure (CII). This move is designed to ensure that the entities responsible for the nation’s most vital digital systems are fully equipped and legally compliant in the face of evolving global cyber threats. In a significant shift toward stricter oversight, designated owners of Critical Information Infrastructure are now subject to stringent reporting requirements. According to the CSA, these entities must report any cybersecurity incidents within 24 hours of discovery and disclose any identified vulnerabilities within a 72-hour window. Furthermore, the Authority has restricted the provision of cybersecurity services to only licensed Tier 1 Cybersecurity Service Providers. This measure ensures that only qualified and vetted professionals are tasked with protecting the nation's high-stakes digital assets, thereby minimizing the risk of internal failures or external exploitation. Director General Agbeti underscored that the protection of critical infrastructure is not merely a technical requirement but a core national security priority. By standardizing the quality of service providers and mandating transparency through incident reporting, the CSA aims to create a robust defense mechanism that protects public services, financial systems, and essential communications networks. Stakeholders across various sectors are urged to adhere strictly to these established requirements, as the CSA has warned that non-compliance will lead to decisive enforcement actions, including potential penalties for those who fail to meet the mandatory safety protocols.