By Edward Dankwah
Accra, Nov. 30, GNA – The Cyber Security Authority (CSA) has presented certificates and accreditation to the third cohort of Cybersecurity Service Providers (CSPs), Cybersecurity Establishments (CEs), and Cybersecurity Professionals (CPs) in the realm of cybersecurity regulatory compliance.
The CSA issued licenses to 13 CSPs, certificates of accreditation to 3 CEs and 58 CPs who have met all requirements and completed the application process.
The Authority on March 1, 2023, triggered a regulatory regime to license CSPs, and accredit CEs and CPs, pursuant to sections 4(k), 49, 50, 51, 57 and 59 of the Cybersecurity Act, 2020 (Act 1038).
The objective is to establish an efficient system to ensure that CSPs, CEs, and CPs deliver services that meet approved standards, comply with domestic regulations, and align with international best practices to enhance cybersecurity and safety for consumers while addressing national security concerns.
Speaking at the event, Dr Albert Antwi-Boasiako, Director-General, CSA, said as mandated by Sections 3, 4(k), 49, 57, and 59 of the Cybersecurity Act, 2020 (Act 1038), the CSA regulated cybersecurity activities within the country.
The Director-General said this included the licensing of CSPs, the accreditation of CEs and CPs.
Dr. Antwi-Boasiako said in line with this, the Authority officially commenced the licensing and accreditation process in March 2023.
“As of September 2024, we have issued final licenses to 26 CSPs and final certificates of accreditation to 15 CEs and 104 CPs,” he added.
He said these licenses and certificates bestowed upon recipients the responsibility to observe utmost good faith in their duties, comply with Act 1038, and adhere to applicable laws, including confidentiality and data protection obligations.
Dr Antwi-Boasiako said the Authority’s approach to implementing this mandate was rooted in collaboration, inclusivity, and best practices.
He said the importance of this licensing and accreditation process cannot be overstated, particularly as the 2024 Presidential and Parliamentary elections drew closer, and as Government and businesses advanced their digitalisation efforts.
The Director-General said given the intrusive nature of cybersecurity services, all CSPs, CEs, and CPs must meet the required standards to operate, especially within critical information infrastructures, including electoral systems and networks.
He said till date, the Authority had registered 276 CSPs, 73 CEs, and 1,563 CPs, many of whom were yet to complete the application process, encouraging those at various stages of the licensing and accreditation process to work diligently to meet the requirements.
He urged the recipients to conduct their duties with professionalism and excellence, ensuring the security and resilience of Ghana’s critical infrastructure.
Dr Antwi-Boasiako said the recently launched Industry Forum under Section 81 of Act 1038 provided a platform for stakeholders to share ideas, shape policy, and enhance industry standards, encouraging the recipients to actively participate.
The Director-General said to enhance the regulatory process, they have inaugurated Independent Assessors to support the CSA in executing relevant regulatory activities.
“These accredited Cybersecurity Professionals will conduct site inspections, cybersecurity audits, and assist in research and development”
“Their role includes providing expert assessments, and recommendations while ensuring impartial evaluations. I appeal to all stakeholders to cooperate with the assessors as they work collaboratively with the CSA,” he added.
He said the CSA was committed to enforcing the provisions of the Cybersecurity Act regarding its mandate to regulate CSPs, CPs and CEs to the latter and that those found guilty would face the full rigors of the law including, criminal prosecutions and administrative penalties where applicable.
Dr Antwi-Boasiako implored institutions and individuals to engage only licensed CSPs and accredited CEs and CPs in their own interest and in the interest of the state.
GNA