CAC Breach Concerns: NITDA Directs MDAs to Tighten Cybersecurity Controls

The move reflects growing recognition that as public institutions become more technology-driven

As Nigeria accelerates the digitisation of public services, the security of government platforms has become increasingly critical. From company registration and compliance filings to access to official records, the Corporate Affairs Commission (CAC) now sits at the heart of Nigeria’s ease-of-doing-business ecosystem, making it one of the country’s most strategic digital institutions.

Against this backdrop, the National Information Technology Development Agency (NITDA) and the CAC have initiated coordinated measures to strengthen cybersecurity following recent concerns affecting aspects of the commission’s digital systems.

The move reflects growing recognition that as public institutions become more technology-driven, they also become more attractive targets for cyber threats, system disruptions, and data compromise attempts.

Both agencies disclosed that they have activated response and assurance mechanisms in line with national cybersecurity frameworks to safeguard critical digital infrastructure, protect sensitive records, and maintain uninterrupted service delivery.

For businesses across Nigeria, the CAC platform has become indispensable for incorporation, post-incorporation filings, status searches, and regulatory compliance. Any disruption to such a platform can have ripple effects on entrepreneurs, investors, legal practitioners, and the broader economy.

NITDA, which serves as Nigeria’s lead agency for digital governance and IT regulation, used the development to reiterate a broader warning to all Ministries, Departments, and Agencies (MDAs): cybersecurity can no longer be treated as an afterthought.

The agency stressed that all MDAs must adopt proactive cyber defence measures in line with the National Cybersecurity Policy and Strategy (NCPS) 2021, Nigeria’s framework for protecting national digital assets and strengthening cyber resilience.

Industry observers say the latest action underscores a new reality: as Nigeria builds a digital-first public sector, cybersecurity readiness must rise at the same pace as innovation.

In a statement signed by Mrs Hadiza Umar, director, Corporate Communications and Media Relations Department at NITDA, the agency directed all MDAs to immediately review and reinforce their cybersecurity architecture to address emerging threats targeting government systems and sensitive data.

As part of the directive, MDAs are required to conduct comprehensive security assessments, remediate identified vulnerabilities, and strengthen access controls across critical platforms.

They are also expected to enhance data protection mechanisms, maintain effective backup and disaster recovery systems, and improve monitoring capabilities to detect and respond to suspicious activities.

In addition, there is the need for functional incident response frameworks, including prompt reporting of cybersecurity breaches for coordinated intervention.

Detailed cybersecurity guidelines have already been issued to MDAs for implementation as part of ongoing efforts to strengthen resilience across public sector digital infrastructure.

The measures are aimed at improving the overall security posture of government institutions and ensuring the continued protection of national digital assets.

NITDA reaffirmed its commitment to supporting government agencies in safeguarding digital systems and advancing cybersecurity best practices across the public sector.

0Shares