Ghana: CSA Directive for the Protection of Critical Information Infrastructure (CII)
Progress
Current status
in force
01 Oct 2021 in force
Scope
Implementers
Ghana
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services
infrastructure provider: cloud computing, storage and databases
infrastructure provider: network hardware and equipment
infrastructure provider: other
Government Branch
executive
Government Body
other regulatory body
Implementation Level
national
Timeline of events
Implemented CSA Directive for the Protection of Critical Information Infrastructure (CII) including 24-hour incident reporting and 72-hour vulnerability disclosure obligations
On 1 October 2021, the Cyber Security Authority (CSA) adopted and implemented the Directive for the Protection of Critical Information Infrastructure, pursuant to the Cybersecurity Act 2020 (Act 1038). The Directive requires designated CII Owners to…
SourceEvent type
order
Action type
implementation
Government branch
executive
Government body
other regulatory body