The Nigerian apex bank has issued Cybersecurity guidelines for other financial institutions (OFIs).
The Central Bank of Nigeria made this known in a circular dated and signed by Nkiru Asiegbu, director, other financial institutions supervision department 29 June 2022.
Based on the circular from CBN, all OFIs are expected to fully comply with the provisions of the guidelines by 1 January 2023.
The circular clarified that threats such as ransomware, targeted phishing attacks, and advanced persistent threats (APT) have become prevalent, demanding that financial institutions, including OFIs, strengthen their cyber resilience and take proactive steps to secure their critical information assets.
Due to the recent increase in the number and sophistication of cybersecurity threats against financial institutions, especially other financial institutions (OFIs), it has become mandatory for institutions to strengthen their cyber defenses if they are to remain safe and sound,” the circular reads.
“Consequently, the CBN hereby issues the attached risk-based cybersecurity framework and guidelines for OFIs, which represent the minimum requirements to be put in place by all OFIs.
“The effective date for full compliance with the provisions of the guidelines is 1 January 2023, and all OFIs are expected to comply on or before that date.”
The CBN said the guidelines specify the minimum requirements the OFIs need to observe in the development and implementation of strategies, policies, procedures, and related activities aimed at mitigating cyber risks.
“OFIs should note that for a cybersecurity program to be successful, it must be fully integrated into their business goals and objectives, and must be an integral part of the overall risk management processes,” it added.
“The framework provides a risk-based approach to cybersecurity risk.
“The document comprises six parts: cybersecurity governance and oversight, cybersecurity risk management system, cyber resilience assessment, cybersecurity operational resilience, cyber-threat intelligence and metrics, monitoring and reporting.”
The CBN circular is coming days after reports surfaced that Momo Payment Service Bank Limited (Momo PSB), the fintech subsidiary of MTN Nigeria, suffered a “security breach”, resulting in a loss of N22 billion.
The incident occurred barely a week after the PSB commenced operations.
