The Cyber Security Authority (CSA) has started the implementation of licensing Cybersecurity Service Providers (CSPs), accrediting Cybersecurity Establishments (CEs) and Cybersecurity Professionals (CPs), pursuant to the Cybersecurity Act, 2020 (Act 1038), sections 4(k), 49, 50, 51, 57 and 59 from today Wednesday, March 1, 2023.
According to the Authority, the purpose of the regime is to ensure regulatory compliance with the Cybersecurity Act, 2020 (Act 1038) and to certify that CSPs, CEs and CPs offer their services in accordance with approved standards and procedures in line with domestic requirements and industry best practices.
Regarding the scope of Licence and Accreditation, the CSA said in a statement that given the critical role Cybersecurity Establishments such as digital forensic laboratories and managed cybersecurity services play in securing Ghana’s digital ecosystem, it is imperative that processes and technology used by such establishments are in line with international best practices and standards adopted by the Authority.
“It has therefore become essential that the Authority, in line with Section 59(3) of Act 1038, takes the necessary measures such as licensing CSPs and accrediting CEs and CPs to ensure that recognised standards have been met. The regulatory process starts with the licensing of existing and new CSPs, which will subsequently be followed by the accreditation of CEs and CPs.
“CSA will license CSPs and accredit CPs with requisite expertise in Vulnerability Assessment and Penetration Testing, Digital Forensics Services, Managed Cybersecurity Services, Cybersecurity Governance, Risk and Compliance.”
Cyber Security Authority
CSA noted that Accreditation to Cybersecurity Establishments will consider Digital Forensics Facility and Managed Cybersecurity Service Facility. Under the regime, existing CSPs, who are already engaged in the business of providing cybersecurity services will be given six months (from March 1 to September 30, 2023) to apply for a licence. A CSP who fails to obtain a licence within this period will have to cease operation until a licence is obtained from the Authority.
Benefits To the Industry And Country
Regarding the benefits to industry and the country, the statements said “It has become necessary that the industry is regulated to control cybersecurity risks and protect the interests and safety of the Public, Children, Businesses, and Government.
“With the increasing rate of cybercrimes, CSPs, CEs and CPs have become critical components for mitigating cybersecurity threats and vulnerabilities within Ghana’s fast-developing digital ecosystem in line with the Cybersecurity Act, 2020 (Act 1038). Cybersecurity services by the nature of their operations are intrusive, and as a result, CSPs, CEs and CPs always gain access to clients’ critical information assets, thereby gaining knowledge of existing vulnerabilities and sensitive information, which could be potentially abused or exploited.
“It is also possible to have CSPs, CEs, and CPs who may not be competent or who may employ substandard processes in their offerings to the detriment of Ghana’s digital ecosystem. In addition, some businesses or government agencies lack the capability of ascertaining the credibility or qualification of CSPs, CEs or CPs especially, since there is no repository of licensed and accredited CSPs, CEs or CPs.”
Cyber Security Authority
CSA explained that this process is to ensure that the targeted entities have the requisite skillset and competence and meet the established standards for offering sufficient protection of the computer systems and networks in the country’s digital ecosystem.
Recently, Ghana signed MoU with Israel to strengthen its cybersecurity. The agreement focused on co-operation to strengthen cybersecurity and co-operation between the two countries in the fields of telecommunications, post and information technologies.
To boost the co-operation to strengthen cybersecurity between the two countries, the MoU recognized that the proper functioning and security of the digital environment (including the internet) are essential to the performance of economies and societies, and stimulate growth, innovation, well-being and inclusiveness.
READ ALSO: COCOBOD Inaugurates Nine-Member Committee To Boost Local Cocoa Consumption
