Olorunfemi Agoye, a technology strategist and cybersecurity consultant, has restated the need for a unified cybersecurity approach to protect Nigeria’s critical infrastructure. 

Mr Olorunfemi said this on Monday in an interview, emphasising the cyberattacks on recent government agencies and financial institutions, which he described as deep structural weaknesses.

He said cybersecurity was a national security imperative, stating that a digital economy without it is “like a city without law and order”, making it highly vulnerable.

“Exposures involving the Corporate Affairs Commission, Sterling Bank, Remita, and Lagos State University have revealed a pattern that cuts across critical layers of Nigeria’s digital ecosystem.

“What they collectively expose is not just vulnerability at the institutional level, but fragility at the architectural level. Digital systems across the public and private sectors often operate in silos. This fragmentation creates multiple points of weakness, entry points that sophisticated threat actors can exploit,” he said.

He said the infrastructure supporting Nigeria’s accelerated digital transformation has not evolved, which could result in rapid growth of the digital landscape, and that this growth is marked by imbalance and systemic risks.

He noted that while frameworks such as the National Cybersecurity Policy and Strategy 2021 provided a foundation, there was a need for more consistent implementation, enforcement and continuous validation.

“All critical systems, public and private, must meet clearly defined baseline security requirements, supported by regular audits, real-time monitoring and mandatory compliance mechanisms. However, standards on their own are not enough; what matters is how effectively they are implemented,” he said.

Mr Olorunfemi, who also works at the intersection of digital trust for the National Information Infrastructure Protection, also called for cross-sector coordination of digital security.

He stressed that cybersecurity must be managed as a shared national responsibility, not an institutional one.

“This requires robust mechanisms for information sharing, joint incident response, and coordinated threat intelligence across agencies. Without this coordination, responses will remain fragmented and systemic vulnerabilities will persist,” he said.

He added that for cybersecurity to be effective, it requires sustained investment in capacity-building to ensure operational continuity, economic stability, and national security.

“This extends beyond technical skills to include leadership, governance and institutional design. Building this understanding requires targeted training, executive-level engagement, and the integration of cybersecurity into core organisational strategy.

“Nigeria must invest in developing a pipeline of cybersecurity professionals capable of supporting its growing digital ecosystem. Without the human capacity to design, implement, and manage secure systems, even the best policies will fail in execution,” he said.

He noted that Nigeria required a shift from viewing cybersecurity as a defensive function to recognising it as a foundational element of digital development.

(NAN)