Establishing a Nigerian centralized cybersecurity enforcement agency: An evaluation of governance and capacity building

Rasaq, Aminu Ola; Adenomon, Monday O.; Chaku, Emmanuel S.; Ibrahim, Usman

doi:10.22059/jcss.2025.397487.1173

Establishing a Nigerian centralized cybersecurity enforcement agency: An evaluation of governance and capacity building

Articles in Press

Document Type : Original article

Authors

Aminu Ola Rasaq

Monday O. Adenomon

Emmanuel S. Chaku

Usman Ibrahim

Centre for Cyberspace Studies, Nasarawa State University, Keffi, Nigeria.

10.22059/jcss.2025.397487.1173

Abstract

Background: As Nigeria continues to experience rapid digital transformation, cybersecurity threats have become increasingly sophisticated, necessitating robust institutional frameworks for effective enforcement.
Aims: The Objective of this study is to evaluate Nigeria’s current cybersecurity enforcement landscape and analyze the potential benefits of establishing a centralized enforcement agency.
Methodology: Mixed methods are used: Quantitative surveys (600 respondents) and qualitative interviews (20 experts). Data analyzed via SPSS and thematic analysis is also employed.
Findings: Key findings include gaps in coordination, low policy awareness, fragmented institutional structure, international models favor centralization.
Conclusion: Nigeria’s fragmented cybersecurity governance structure hampers effective policy implementation, incident response, and capacity building. Recommendations include Legal reforms, capacity expansion, policy articulation, inter-agency coordination, international collaboration.

Keywords

Cybersecurity Governance

Nigeria

Capacity Development

Enforcement

Multi-stakeholder Analysis

Subjects

computer science & technology

African Union Commission. (2022). Digital Transformation Strategy for Africa (2020-2030). Addis Ababa.

Amadi & Ekpe (2020). Reforming Nigeria’s cybersecurity governance: Challenges and prospects. African Journal of Information Systems. 12(3): 45-60.

CISA. (2023). Strategic Plan 2023–2028. Cybersecurity and Infrastructure Security Agency. https://www.cisa.gov/news/2023/07/15/cisa-strategic-plan-2023-2028.

Cyber Security Agency of Singapore. (2022). Annual Report 2022. CSA. https://www.csa.gov.sg/-/media/csa/documents/publication-info/annual-reports.

ITU. (2023). “Geneva: Global Cybersecurity Index”. ITU Publications. https://www.itu.int/en/ITU D/Cybersecurity/Pages/global-cybersecurity-index.aspx.

NCSC: National Cyber Security Centre. (2024). Annual Review. UK Government. https://www.ncsc.gov.uk/files/NCSC%20Annual%20Review%202024.pdf.

Ojo, A.I. & Abubakar, M.N. (2023). “Challenges and opportunities in Nigeria’s cybersecurity governance”. African Journal of Information Systems. 15(2): 45-68. https://doi.org/10.2298/AJIS220045AB.

Royal United Services Institute. (2021). UK’s National Cybersecurity Strategy: An Analysis. RUSI Publications. https://rusi.org/publication/analysis/uk-national-cybersecurity-strategy.

U.S. Department of Homeland Security. (2020). DHS’s Role in Cybersecurity. DHS Publications. https://www.dhs.gov/cisa.

World Economic Forum. (2024). “Global Cybersecurity Outlook 2024”. Geneva: World Economic Forum. https://www.weforum.org/reports/global-cybersecurity outlook-2024/.