CSA bans cybersecurity service providers without accreditation from operating

The Cyber Security Authority (CSA) – the body mandated to regulate cybersecurity activities and promote the development of cybersecurity in Ghana has barred Cybersecurity Service Providers (CSPs), Cybersecurity Establishments (CEs), and Cybersecurity Professionals (CPs) without a license or accreditation from operating in the country.  

In a press statement, the Authority said it follows the December 31, 2023, deadline to CSPs, CEs, and CPs to obtain a licence or accreditation to operate lawfully in the country.

“The Cyber Security Authority  will fully enforce the provisions of the Cybersecurity Act, 2020 (Act 1038)
regarding its mandate to regulate CSPs, CPs and CEs. Accordingly, CSPs, CEs and CPs who offer cybersecurity services without a licence or accreditation granted by the Authority, do so in contravention of Act 1038 and will face the full rigors of the Law including criminal prosecutions and administrative penalties where applicable” part of the statement reads.

It added, “Institutions and individuals are consequently advised to engage only licensed CSPs and accredited CEs and CPs.”

Read full statement below:

PRESS RELEASE – LICENSING AND ACCREDITATION – POST DEADLINE – JAN 2024 – FINAL (1)