Background: As data breaches and cyberattacks increase, understanding how regulatory compliance impacts cybersecurity performance is critical.
Aims: This study explores the relationship between compliance with the Nigeria Data Protection Regulation (NDPR) and the effectiveness of cybersecurity measures in Nigerian organizations.
Methodology: Using an empirical approach, data were collected from 30 organizations across sectors such as Financial Services, Telecommunications, Health, Education, and SMEs. Key variables analyzed include NDPR compliance rate, employee training, investment in cybersecurity infrastructure, and their effect on cybersecurity effectiveness indicators such as incident reduction, system uptime, and employee awareness.
Findings: The findings reveal a strong positive correlation between NDPR compliance and cybersecurity effectiveness. Organizations with higher compliance rates experienced a significant reduction in cybersecurity incidents, improved system resilience, and heightened employee awareness. Investment in cybersecurity infrastructure and regular employee training emerged as critical factors influencing these outcomes. Financial Services and Telecommunications sectors demonstrated the highest levels of compliance and effectiveness, while SMEs and the Public Sector faced significant barriers, including inadequate budgets and technological gaps.
Conclusion: This study highlights the pivotal role of NDPR compliance in strengthening organizational cybersecurity frameworks. It underscores the need for sector-specific strategies, increased investment, and enhanced regulatory enforcement to bridge compliance gaps. Policymakers and organizational leaders are encouraged to prioritize compliance initiatives as a pathway to improved cybersecurity effectiveness, ensuring data protection and resilience against evolving cyber threats.