The Lagos State Government has introduced a comprehensive set of cybersecurity guidelines aimed at enhancing digital safety for businesses, public institutions, and residents. This initiative seeks to position Lagos as a secure digital hub in the face of escalating cyber threats.
The announcement was made by the Commissioner for Information and Strategy, Gbenga Omotoso. These new guidelines were developed with the input of the Lagos State Cybersecurity Advisory Council, chaired by Fene Osakwe.
Nigeria currently experiences an estimated annual loss of $500 million, approximately N250 billion, due to cybercrime. The new framework is designed to provide a practical and scalable approach for organisations to protect their systems and data.
Lagos State Cybersecurity Guidelines
The guidelines, accessible at https://lagosstate.gov.ng/cybersecguide, offer clear, practical, and scalable cybersecurity best practices. They are intended for small businesses, medium and large enterprises, and government Ministries, Departments, and Agencies (MDAs).
These guidelines are aligned with key national regulations, including the Cybercrime Act (2024), the Nigeria Data Protection Act (2023), and the National Cybersecurity Policy and Strategy (2021). The framework places significant responsibility on small and medium-sized enterprises (SMEs).
Organisations are expected to adopt data minimisation principles, implement secure storage systems with encryption, and develop clear incident response plans. They are also required to report incidents to relevant authorities, including ngCERT, within 72 hours. Furthermore, breaches must be notified to the Nigeria Data Protection Commission and affected customers.
The state government emphasized that these guidelines are not mandatory regulations but rather tools to assist stakeholders in adopting effective cybersecurity practices. Cybersecurity is viewed as a shared responsibility, crucial for economic stability and attracting global investment.
Organisations are advised to assess the cybersecurity posture of third-party vendors, cloud providers, and service partners as part of their risk management strategy. The government also urged immediate action, including conducting self-assessments, implementing foundational security controls, investing in staff awareness, and collaborating with state-led cybersecurity initiatives.
The initiative was driven with the support of the Commissioner for Innovation, Science and Technology, Tubosun Alake.
