Telecoms: ‘Information Sharing Key To Infrastructure Protection:

In a rapidly evolving digital landscape, securing telecoms infrastructure has become a priority for governments and organisations worldwide.

Industry experts have emphasised the urgent need to establish a telecommunications information sharing network to safeguard critical infrastructure against escalating cyber threats.

Telecommunications networks underpin modern society, enabling communication, commerce, and national security operations.

However, these systems have increasingly become targets for sophisticated cyberattacks, ranging from ransomware and Distributed Denial of Service (DDoS) attacks to nation-state-sponsored intrusions.

In 2023, global cyberattacks on telecom providers rose by 25 per cent, exposing vulnerabilities in both legacy systems and emerging technologies like 5G.

The Executive Vice Chairman and CEO of the Nigerian Communications Commission (NCC), Dr. Aminu Maida, at a recent forum for policymakers and sector regulators, disclosed the establishment of a trusted information sharing network to enhance information sharing and risk assessment related to the critical national infrastructure, and promote ‘decentralised risk assessment and building capacity to implement effective security measures’ Maida emphasised the need for inter-sectoral collaborations in order to enhance the much-needed resilience against reported emergent cyberthreats in the country’s cyberspace.

He also advocated a speedy implementation of President Bola Ahmed Tinubu’s earlier Executive Order (EO) on the CNII protection in the Nigerian digital space.

He said: “The CNII Order emphasises resilience, a principle that will ensure our networks can recover quickly from incidents, maintaining the trust of the public and businesses that rely on telecom infrastructure daily.”

Regarding the essence of stakeholder collaboration in achieving the set objective of protecting the CNII in the ecosystem, Maida also disclosed under the leadership of the Office of the National Security Adviser, and in collaboration with key stakeholders from the Nigerian Government, information infrastructure operators, and relevant private sector organisations.

“a Trusted Information Sharing Network (TISN) will be established to enhance information sharing and risk assessment related to critical national information infrastructure.”

The ngCERT@ngCERTofficial, in a statement on its verified social media account, noted that “key efforts include developing a Critical National Information Infrastructure Protection Plan (CNIIPP) and establishing a Trusted Information Sharing Network (TISN) to promote unified cybersecurity approaches.”

The statement came following the launch of the Protection and Resilience Workshop Series, in Abuja. Malam Nuhu Ribadu, National Security Adviser, inaugurated a significant workshop series aimed at enhancing the protection and resilience of Nigeria’s Critical National Information Infrastructure (CNII-P).

It said the initiative followed the recently approved Order for the Designation and Protection of Critical National Information Infrastructure (DPCO).

“The inaugural event gathered stakeholders from government, regulatory bodies, and private organisations to develop strategies for safeguarding vital information assets,” the statement noted.

“TISN facilitates real-time information sharing among telecom providers, government agencies, and cybersecurity experts. “Collaboration enables stakeholders to exchange critical data about emerging threats, vulnerabilities, and best practices for mitigation.

By pooling resources and expertise, a TISN strengthens collective resilience against cyber incidents,” a cybersecurity expert, Matthew Adegbite , stated.

He noted that countries like the United States and the United Kingdom have already taken steps toward fostering similar networks, such as the National Cybersecurity and Communications Integration Center (NCCIC) and the National Cyber Security Centre (NCSC).

He said however, establishing a global TISN faces challenges, including differences in regulatory frameworks, data privacy concerns, and the need for trust among stakeholders.

“Cybersecurity is not a solitary effort. We need a unified approach to protect critical infrastructure that transcends borders,” he said.