The Nigerian Communications Commission (NCC), International Telecommunication Union (ITU) and Central Bank of Nigeria (CBN) have called for tougher cybersecurity safeguards as artificial intelligence increasingly exposes Nigeria’s telecommunications networks, financial institutions and other critical infrastructure to sophisticated digital attacks.
The organisations stressed the need for stronger regulations, skilled cybersecurity professionals and coordinated responses to emerging threats, warning that criminals are exploiting AI technologies to carry out increasingly convincing fraud and cyberattacks.
Their recommendations were presented on Wednesday at the conclusion of the second International Cybersecurity Conference (ICSC) in Abuja.
The two-day event, themed “Cyber Resilience in the Age of AI: Defending Minds, Networks and Nation”, brought together regulators, technology experts and industry representatives to examine the growing challenges of securing digital systems.
NCC Warns of AI-Powered Cyberattacks
Musa Daibu, Head of Fixed Network and Converged Services under the NCC’s Technical Standards and Network Integrity function, said artificial intelligence presents both opportunities and serious cybersecurity challenges.
He explained that AI-powered systems could help organisations identify suspicious activities, detect potential breaches and respond more quickly to security incidents.
However, the same technology could enable criminals to automate attacks, develop convincing phishing messages and impersonate legitimate individuals or organisations.
Daibu said telecommunications operators must strengthen their internal security arrangements to address these evolving threats.
He urged regulators to establish minimum cybersecurity requirements, enforce technical standards and conduct regular compliance audits across the communications industry.
According to him, network operators should maintain effective risk management systems, incident response procedures and disaster recovery plans to minimise disruptions when attacks occur.
NCC Seeks Review of Cyber Resilience Framework
Daibu disclosed that the NCC had developed a Cyber Resilience Framework for Nigeria’s communications sector, accompanied by implementation guidance for operators.
He said the framework and its supporting documents should be reviewed to determine whether they adequately address risks arising from artificial intelligence and machine learning.
The NCC official also advocated a national cybersecurity index to evaluate how effectively critical infrastructure operators are protecting their systems.
He recommended mandatory baseline security requirements for organisations providing essential services.
Daibu emphasised that cybersecurity responsibilities should be clearly distributed among regulators, telecommunications companies, technology providers and government institutions.
He maintained that preventing every cyber incident might be unrealistic, but appropriate safeguards could reduce the likelihood of attacks and limit their consequences.
ITU Identifies Cybersecurity Skills Shortage in Africa
Zongo Valery, Senior Cybersecurity Coordinator at the International Telecommunication Union, raised concerns about Africa’s readiness to confront increasingly complex AI-driven cyber threats.
He identified shortages of specialised cybersecurity professionals and inadequate threat intelligence capabilities as major obstacles to protecting critical infrastructure.
Valery said governments and industry operators needed stronger partnerships to identify emerging risks and exchange reliable security information before attacks escalate.
He also called for improved national incident response systems capable of coordinating action across sectors during major cyber emergencies.
According to him, many existing cybersecurity regulations are struggling to keep pace with technological developments.
He therefore recommended flexible, risk-based regulatory frameworks that could respond to new threats without unnecessarily restricting innovation.
Valery said the ITU was working on standards and guidance to strengthen AI security.
He urged Nigeria to move beyond legislation by implementing practical security requirements, regularly testing cyber resilience systems and strengthening national coordination.
CBN Raises Alarm Over AI Voice Cloning and Identity Fraud
The Central Bank of Nigeria also highlighted the growing danger of AI-enabled impersonation to the country’s financial system.
Mrs Omoyemen Jide-Samuel, the CBN’s Director of Information Technology, warned that cybercriminals could manipulate voices, photographs and documents to deceive financial institutions and their customers.
She explained that increasingly realistic digital impersonation could allow fraudsters to issue seemingly authentic instructions and cause financial losses even when underlying payment systems were functioning properly.
The development raises concerns about the reliability of traditional identity verification procedures, particularly where financial transactions are authorised through telephone calls, electronic messages or digital documents.
Jide-Samuel urged banks and other financial institutions to adopt continuous identity verification and independently confirm sensitive instructions before processing transactions.
She also recommended stronger intelligence sharing among banks, telecommunications operators, technology companies, law enforcement agencies and financial regulators.
Why AI Cybersecurity Is Becoming a National Concern
Nigeria’s growing dependence on digital banking, telecommunications networks and online public services has increased the importance of protecting critical information infrastructure.
Artificial intelligence has introduced new tools for detecting cyber threats, but it has also made certain forms of online fraud more difficult to recognise.
AI-generated voices, manipulated images and convincing fraudulent communications can be used to exploit weaknesses in organisational procedures and public awareness.
Cybersecurity specialists increasingly emphasise the importance of combining technological safeguards with staff training, independent verification and coordinated incident reporting.
The recommendations from the Abuja conference reflect concerns that security policies must evolve alongside the technologies being adopted by businesses and government agencies.
Stakeholders Seek Coordinated National Response
The NCC, ITU and CBN representatives agreed that protecting Nigeria’s digital infrastructure requires cooperation among regulators, technology providers, businesses and security agencies.
Their proposals include stronger technical standards, cybersecurity training, routine compliance assessments and effective systems for sharing threat intelligence.
They also highlighted the need for organisations to prepare for attacks rather than relying exclusively on preventive security measures.
The conference concluded with renewed calls for Nigeria to strengthen its cyber resilience as artificial intelligence transforms both digital services and the methods used by cybercriminals.
