Connect with us


Nigeria Cyberspace Neglected, Unprotected Territory- Onifade



Opeyemi Onifade, president, Information Systems Audit and Control Association [ISACA] Abuja chapter,

As the use of IT becomes pervasive, government, large corporations and private organizations are daily combating cyber security.
In this encounter with Opeyemi Onifade, president, Information Systems Audit and Control Association [ISACA] Abuja chapter, examine the trend. Excerpts.     

How Big is Cyber Security Threats in Nigeria
Nigeria as a member of the global society and the country cannot be insulated from the opportunities and threats of globalization. Now, the use of IT is pervasive.
Many organizations in Nigeria are leveraging on the Internet to transact and interact with customers, employees, suppliers and partners. The internet has become imperative to address our collective capacity to respond to the inevitability of cyber threats, especially Advanced Persistent Threats [APT].
Primarily, the purpose of the majority of APTs is to extract information from systems—this could be critical research, enterprise intellectual property or government information, among other things.
Talking about the shift in the motive for hacking (i.e. compromising the security profile of information systems), you will find that there is an evolution in the motivation for attacks.
Motivation for attacks can be explained as being attacked because you are on the Internet and you have vulnerabilities. Or because you are on the Internet and you have information of value; or because your former or current employee seeks financial gain from selling your intellectual property (IP) or because of who you are, what you do or the value of your IP.
And these include state-sponsored attacks and corporate espionage. According to recent research, Cybersecurity is a top global concern. 82% of enterprises are expected to experience a cyber incident in 2015.

Businesses and Government Preparing for the Current Threat
Financial industry players like banks have strengthened their cyber resilience through implementation of adequate technology, adoption of process-oriented good practices and standards, and engagement of right skills and competencies.
However, our government needs to consider a special vehicle to establish the framework to address cybersecurity issues strategically, tactically and operationally.
This is because cybesecurity is a security issue, in fact a national security concern.
We need to understand that we cannot succeed by accident. The cyberspace is now recognized as the fifth domain of warfare in addition to land, air, sea and space.
Unfortunately, in Nigeria, our cyberspace domain is still a neglected and unprotected territory.
Yet, we have come to depend so much on mobile telecommunications, electronic banking and e-commerce for our socioeconomic survival.
In specific terms, there is a need for the government to declare an emergency in the cybersecurity education domain of the country in order to promote cyber security expertise and create a formidable “army” that will be able to ensure effective national cyber defense.
The University Commission needs to update curricula development and accredit information security courses in our tertiary institutions.
Standards Organization of Nigeria needs to domesticate the information security related international standards. NITDA needs to wake up to her responsibilities as the governing body for IT-related security issues in the country.
This is an unfamiliar territory to government bureaucracy and the bureaucrats need to have the humility to collaborate with the professional bodies like ISACA with over 2000 credentialed Nigerian members in the interest of security of the country and wellbeing of her citizens.

Where Does ISACA Fit into all of These?
ISACA provides practical guidance, benchmarks and other effective tools for all enterprises that use information systems.
Through its comprehensive guidance and services, ISACA defines the roles of information systems governance, security, audit and assurance professionals worldwide.
The COBIT framework and the CSX, CISA, CISM, CGEIT and CRISC certifications are ISACA brands respected and used by these professionals for the benefit of their enterprises.
Nigerian banks depend on our members to man their audit, risk, e-business, operations and strategy department. CBN guidelines to the banks require them to use ISACA’s framework to align IT with Business strategy.
To become a member, you are required to register as a professional or student member.
Membership gives you access to vast educational opportunities and international networks.
Members are supported to earn professional credentials upon passing relevant exam and demonstrating verifiable work experience.
ISACA operates three chapters in Nigeria- Abuja, Lagos and Ibadan.  There are over 2000 members resident in Nigeria at the last count.

How can ISACA Enable Proven Best Practices to Reduce the Attack Surface, and Mitigate Risks?
For over 40 years, ISACA has promoted trust in, and value from information systems. ISACA has published frameworks and standards related to information assurance, information security, risk management, and corporate governance of IT.
We have been a global thought-leader on these issues.
In 2015, ISACA commenced a skill-based credentialing programme, Cybersecurity nexus CSX to develop and validate cybersecurity competencies. 
This programme is in recognition that the most advanced of cyber attacks are done by people and the defense side needs to have adequate competencies to reduce or eliminate opportunities for successful attacks.
ISACA provides access to the knowledge and competencies for cybersecurity in over 180 countries of the world.
ISACA Abuja chapter will be 10 years this year. What are your plans to commemorate this?  What are the preparations for the up-coming annual conference?
As part of our contribution to promoting the right use of information technology in the country, ISACA Abuja Nigeria has been hosting annual international conferences. The seventh edition coincides with our 10th anniversary.
This conference theme is “CYBERSECURITY: Aligning Nigeria with the rest of the World”. The Chief Information Security Officer of the City of Atlanta,
USA has accepted our invitation to be the keynote speaker. We are also drawing speakers from other parts of the world and from within the country.
As a social responsible professional body, we shall be donating IT-related books to tertiary institutions and libraries in Abuja.
We have also planned a free seminar for students of tertiary institutions interested in cybersecurity profession.
The platform is meant to provide mentorship to future cybersecurity professionals. To commemorate our 10th anniversary, we will be signing MOU with organizations that believe in our cause to make our cyberspace safe across the country and region.

Nigeria Security Professionals and Requisite Training to Build Strong Core Infrastructure, to Combat Digital Security Threats
According to CISCO, there are over one million unfilled jobs for information security roles worldwide. Another research estimates that more than 35% of enterprises are unable to fill open cyber security positions.
I believe security professionals in Nigeria have not been able to gain the recognition they deserve and so they have not been able to express themselves through hands-on contributions to the economy and national security. Sadly, there is currently an incessant loss of our cyber security professionals to opportunities in the Middle-East economies.
The brain drain will continue until we create an atmosphere to retain these skills. It happened to nursing and medical professionals in the 80’s, it is happening again to our cyber security professionals.
I think there are numerous opportunities for self-development for our professionals, but businesses and all tiers of government must begin to look to our citizens for cyber protection in order to fully engage and truncate the brain drain in the cyber security industry.
I wish to suggest that government agencies and businesses should be involved in sponsoring cybersecurity events for professionals and students.
An example is the cyberlympics organized by ISACA International. President Buhari will need to find a means to drive the cybersecurity agenda for the nation.
Recently the US President issued an executive order on cyber security earlier in the year and the UK government recently made public her National Cyber Security Strategy.

Legislation and Fight Against Security Threats and Cybercrime
Thankfully, the cybercrime bill was passed into law this year and there are attempts by the Office of National Security Adviser to promote a national strategic framework for cybersecurity.
While that is a good step forward, we are still very unserious in providing a legal framework for governing our cyberspace.
I mentioned earlier that our cyberspace is a neglected territory. Our laws should attempt to make Nigeria one of the most secure places to do business.
Until recently, would not ship to Nigeria. Paypal would not do business with Nigeria at all. While these organizations have modified their business models for Nigeria, their service package for Nigeria is still limited.
This means that Nigerians are unable to take full advantage of international e-commerce. For instance, while a Nigerian can pay using the global payment platform, paypal, she cannot receive payment using the same platform.
We need laws that will enable e-business not just punish cyber misdemeanor.
We are hoping that the members of the eight National Assembly will be open to working with experts in non-profit organizations like ISACA to help with research and case studies to make our laws appropriate and relevant to 21st century realities.

What can CISO do to Become very Prominent in Organisations?
The role of a CIO is to create value from the information asset of the organization while a CISO’s role is to preserve the value of the organization’s information asset. Information has become the most important factor of production over land, labour and capital.
Therefore, information security is really about business security. The CEO is the one who will be held accountable for the protection of the most important productive asset of the organization, i.e. the information assets.
He can delegate this responsibility to a CISO but he cannot delegate the accountability.  A CISO therefore needs to recognize his role as someone responsible for business resilience and performance. His role is not just to implement controls but also to ingrain the enablers of business strategic outcomes.

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world.

So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading


 CSO Sends FoI Request To NCC



Following the alleged plans to block online news sites, the Paradigm Initiative has filed a Freedom of Information Act request with the Nigerian Communications Commission asking the Commission to provide it with information on the matter.

The request was filed by the digital rights advocacy organisation on Friday at the Abuja headquarters of the Commission, giving the Commission seven (7) days as stipulated by the Freedom Of Information (FOI) Act 2011, to release information on the alleged attempts to block domain names of online newspapers.

It would be recalled that the Nigerian Tribune exclusively reported on Sunday, October 5 2017 “that the government, through the Nigerian Communication Commission (NCC), has engaged the services of a firm in Lagos to block the domain names of “several identified websites threatening national security.”

The newspaper further alleged that Commission wrote a memo to the firm, directing it “to immediately take steps to restrict access within the Nigerian cyberspace in respect of 21 (twenty one) additional websites by blocking the domain names. (The list of websites is attached).”

According to Adeboye Adegoke, Paradigm Initiative’s Program Manager, “the phrase “additional websites” in the memo indicates that there are other websites already marked for illegal censorship through an equally illegal blockage of their domain names. If this is true, then this would be a clear indication of this government’s anti-free speech agenda”

“It has been six days since Tribune published its story and NCC has not come out to deny the story. This is why we have filed this FoI request. NCC cannot wish this report away; the commission has to come out and address Nigerians on the issue”

In the FoI request, Paradigm Initiative asks NCC to provide it with answers to the following questions: Is the Nigeria Communications Commission or at of its agents in the process of taking steps or block or restrict the domain names of certain websites? If yes, what websites would be affected? What criteria were employed in selecting these websites? Under what legal provision is this being carried out?

According to Tope Ogundipe, Paradigm Initiative’s Director of Programs, “it goes without saying that blocking the domain names of newspapers is a brazen violation of the right to Freedom of Expression as guaranteed not only by the Constitution of the Federal Republic of Nigeria but also by international instruments to which Nigeria is a signatory.”

Continue Reading


Web4Africa Celebrating 15 Years of Operations In Africa



By peter oluka

Web4Africa, the Pan African Web Hosting Company, has reached a milestone this October, celebrating 15 crystal years of business.

The company, offering web services physically from Nigeria, has grown from the dreams of the founders, serving 40,000+ clients across over 120 countries.

Today, the giant strides of Web4Africa is felt across the region with the peculiar nature of customer-centric services to hundreds of domain types as well as hosting solutions from four datacentres across Ghana, Nigeria, and South Africa.

Established in 2002, Web4Africa is one out of the only two ICANN Accredited Domain Name Registrars in Nigeria and boasts of young- professional team (average age of 28) who are skilled and motivated deliver a happy experience to the clients.

“It gives me great pleasure in joining Web4Africa employees, clients and host of business partners South Africa, Nigeria, Ghana; in fact, across the Continent, in celebrating the company’s 15th anniversary. We have come a long way since commencing operations in 2002 and are very excited about our future as the company continues to thrive in these difficult economic times,” said Oluniyi Ajao, the President and CEO, when discussing the celebration.

Web4Africa’s ability to engineer solutions based on customer’s specific needs has helped the company to continually grow over the past 15 years. For instance, the Company is among the few that accepts Bitcoin, Perfect Money, Skrill, Payza, and more for Domain Registration, Web Hosting, VPS Hosting, Dedicated Servers.

“Our strongest area has always been the mass market. It so happens that to cover that large number of people, our price has to be reasonable. We make our pricing to be within reasonable range to attract the right people”, Mr. Ajao said, while speaking on 25% discount offering to customers as part of packages to mark anniversary.

Clients’ fondness for Web4Africa’s is not far-fetched, but due to its affordability and cost-effective carrier-neutral environment; local cloud hosting (in Nigeria), offers promise for future growth and 100% uptime.

Continue Reading


Sunday Dare honored with Democracy Heroes Award



Organisers of Face of Democracy Nigeria Award (FDN) on Sunday night honored Mr. Sunday Dare, Executive Commissioner Stakeholder Management, Nigerian Communications Commission (NCC), with Democracy Heroes Award for his decades of consistency in promoting democracy in Nigeria.

Face of Democracy Nigeria (FDN), now in its fifth year said Mr. Dare has acted in manners worthy of emulation by Nigerian youths.

Therefore, they urged young people to step out to participate in the democratic process by contesting elections in order to represent the people of Nigeria conscientiously.

The FDN team leaders, Olufunsho Ajagbonna and Vivian Lam were emphatic that all the awardees were honoured to enable young people to draw inspiration from their courage, consistency and selflessness.

The event, which was over-subscribed, held at the Transcorp Hilton Hotel and ended past midnight, featured series of dances and other artistic displays representing the diversity of Nigeria.

Among those who received awards at the event last night were former Governor of Kano State and serving Senator, Dr. Rabiu Musa Kwankwaso; Senator Gbenga Ashafa, APC Lagos; Actor-turned-politician, Hon. Desmond Elliot; Chief Dele Momodu, Publisher of OVATION Magazine; and.Dr. Chimaobi Anyaso, an entrepreneur with investment in oil & gas and financing among others.

Prior to his appointment as an Executive Commissioner in NCC, Mr. Dare – a multimedia journalist, author, social entrepreneur and development enthusiast – was the Convener of the Social Media Clinic, a media/ICT initiative focused on educating the citizens about ICT utilisation.

Earlier, Dare had a beautiful career at the Independent Network Communications Limited, publishers of TheNEWS, Tempo, AM and PM News, one of the leading media outfits in Nigeria that deployed its professional resources to challenge the callous authoritarianism of the Military regimes of the 80s and early 90s in Nigeria.

For 8 years, he was the Chief, Hausa Service, African Division of VOICE OF AMERICA in Washington.

In 2010, Mr. Dare was listed as one of the 50 successful Nigeria professionals in America.

He had also recently combined the role of Special Media Adviser as well as Chief of Staff to Asiwaju Bola Tinubu, Emeritus Governor of Lagos State and APC National Leader.

In this regard, his work was central to the victory of the Party in the 2015 elections.

The FDN team is of the opinion that Mr. Dare’s almost three decades of journalism, advocacy, strategic political thinking and impeccable managerial skills has set him “apart as an emergent leader in Nigeria today”.

Continue Reading


Copyright © 2017 Communication Week Media Limited.