Resetting Ghana must be anchored in compliance - CSA Director General

The Director General of the Cyber Security Authority (CSA), Divine Selase Agbeti, has disclosed that resetting Ghana must be anchored in regulatory compliance, accountability and stronger cyber resilience.

He stated that for the rest of the year, the CSA will intensify regulatory enforcement to ensure strict adherence to the Directive for the Protection of Critical Information Infrastructure (CII), issued under the Cybersecurity Act, 2020 (Act 1038).

The Directive establishes mandatory cybersecurity requirements for designated CII owners across Ghana’s critical sectors, and compliance is not optional.

According to Mr Agbeti, CII owners are required to report cybersecurity incidents within 24 hours of detection to the relevant Sectoral CERT and the CSA.

“They must also disclose identified vulnerabilities within 72 hours, in line with the Directive,” he added.

The Director General noted that only Tier 1 CSAlicensed Cybersecurity Service Providers are authorised to deliver services to CII owners, warning that engaging unlicensed or nonTier 1 providers constitutes regulatory noncompliance and may attract enforcement action.

He said that protecting Ghana’s Critical Information Infrastructure is a national security imperative. The CSA will therefore strengthen monitoring, compliance assessments and enforcement across all designated CII sectors.

“If you own or operate Critical Information Infrastructure, compliance is your responsibility. Know the Directive. Meet the requirements. Use only authorised Tier 1 CSPs,” he said, adding that resetting Ghana means raising the standard and enforcing it.