About 1,400 individuals and businesses operating in the country have registered with the Cyber Security Authority (CSA) to seek licences and accreditation since the commencement of the implementation of the cybersecurity regulatory regime in March 2023.
A statement copied to the Ghana News Agency in Accra on Tuesday said as of February 19, 2024, the CSA had registered 1,137 Cybersecurity Professionals (CPs), 194 Cybersecurity Service Providers (CSPs) and 52 Cybersecurity Establishments (CEs), bringing the number to 1,383.
It said some institutions and individuals have been issued provisional licences pending the issuance of a final licence, while many others were at various stages of the licensing and accreditation process.
In furtherance of the December 31, 2023 deadline for all existing CSPs, CEs, and CPs to have obtained a licence or accreditation pursuant to sections 3(a), 4(k), 49, 50, 51, 57 and 59 of the Cybersecurity Act, 2020 (Act 1038), individuals and businesses without licences or accreditation
were prohibited from conducting business in Ghana.
‘The CSA is fully committed to enforcing the provisions of the Cybersecurity Act, 2020 (Act 1038) regarding its mandate to regulate CSPs, CEs and CPs. Thus, CSPs, CEs and CPs who are offering cybersecurity services without a licence or accreditation granted by the Authority, do so in contravention of Act 1038 and will face the full rigours of the law including administrative penalties and criminal prosecutions pursuant to sections 49, 92 and 95 of the Act’.
The statement said while audit and enforcement mechanisms remained in place, the CSA was also committed to developing the cybersecurity industry to ensure a secured and resilient digital ecosystem pursuant to section 3(d) of the Cybersecurity Act, 2020 (Act 1038).
‘The CSA has, therefore, established a licencing and accreditation clinic at its premises, on the 3rd floor of the NCA Tower, Airport City, Accra, effective February 8, 2024, to assist all CSPs, CEs, and CPs who qualify but are having difficul
ties in completing the online application process for a licence or accreditation. Every Thursday from 0800 hours to 1600 hours has been earmarked for the process up until the end of the first quarter of 2024’.
It said the CSA and the Public Procurement Authority (PPA) were collaborating to ensure that public sector institutions seeking cybersecurity services followed the rules
established under Act 1038 with covered entities expected to engage only licensed and accredited CSPs, CEs and CPs.
‘Additionally, the CSA is liaising with the Judicial Service of Ghana to ensure that the provisions in the Cybersecurity Act, 2020 (Act 1038) are enforced to the letter. This collaboration is to guarantee that CSPs, CEs, and CPs who testify in all matters before the courts are licensed and/or accredited under Act 1038.
‘All businesses and individuals who seek to engage CSPs, CEs and CPs are further advised to ascertain whether an entity or individual has been granted a licence or accreditation. The certificate number o
f the entity or individual can be authenticated online at https://www.csa.gov.gh/licence’
‘These actions are aimed to guarantee regulatory compliance with the Cybersecurity Act, 2020 (Act 1038) and to streamline the process of providing services in accordance with approved standards and processes that are consistent with domestic laws and international best practices and more especially, to ensure that the digital space is safe’.
Source: Ghana News Agency