The Nigeria Data Protection Commission (NDPC) fined Fidelity Bank N555.8 million for violating data privacy laws, specifically the Nigeria Data Protection Act, 2023, and the Nigeria Data Protection Regulation, 2019. The fine, representing 0.1% of the bank's annual gross revenue, followed an investigation into unauthorized data collection and processing. Despite multiple warnings, Fidelity Bank failed to comply with remedial directives, leading to the penalty. The bank disputes the allegations and may seek legal recourse. The case highlights the importance of data protection compliance in Nigeria's digital economy.

The article introduces the Cyber Career Pathways Tool, developed by the Federal Chief Information Officers (CIO) Council in collaboration with various federal agencies, as a resource to explore cybersecurity career paths within the federal government. It aims to standardize cyber career information, facilitate career development, and promote interagency mobility. The tool categorizes the cyber workforce into five communities: IT, Cybersecurity, Cyber Effects, Cyber Intel, and Cross Functional, each with specific skills and roles. It addresses the cybersecurity talent shortage, enhances workforce readiness, and promotes diversity and inclusion. The tool is positioned as a strategic approach to meet cybersecurity talent needs, offering career development, skill assessment, and training guidance.

The article discusses how individuals can achieve a master's level understanding in Governance, Risk, and Compliance (GRC) through self-learning and free resources. It highlights the importance of GRC expertise for organizations and suggests resources like OCEG, NIST frameworks, and ISO/IEC standards as valuable tools for learning. The author shares personal experiences and emphasizes the accessibility of information in the digital age, encouraging readers to utilize online courses and resources to develop their skills in GRC domains.

The article outlines the initial steps in conducting a gap analysis for ISO 27001 compliance at DevEngineers. It emphasizes the importance of meeting with individual teams to understand their processes and controls, conducting a thorough gap analysis to assess current compliance levels, and gathering relevant documentation. The process involves interviews with stakeholders, walkthroughs, and the use of questionnaires or checklists to gather information. The findings are then analyzed to identify strengths, weaknesses, and areas for improvement, leading to the development of an action plan to address identified gaps and achieve ISO 27001 certification.

The article discusses the severe security challenges facing Nigeria, including the activities of Boko Haram, banditry, and kidnapping. It highlights a recent attack on Governor Babangana Zulum's convoy, which resulted in injuries and has sparked widespread condemnation and calls for action. The National Assembly and the Nigeria Governor’s Forum are among those demanding a revamp of the country's security architecture. The author questions the government's role in addressing these issues and emphasizes the need for both technical and adaptive approaches to tackle the internal aggression and socio-economic disruptions caused by these security threats. The article suggests that Nigeria should learn from the experiences of other countries like Sri Lanka and Colombia in dealing with similar challenges.

The article discusses the issue of youth unemployment in Jigawa State, Nigeria, and its implications for security and socio-economic development. The author recalls the promise of job creation by the APC and Governor Muhammadu Badaru during the 2015 elections, noting the subsequent recruitment of teachers but arguing that these efforts are insufficient given the high unemployment rates reported by the NBS. The author suggests that solutions should focus on entrepreneurship and skills development rather than politically motivated programs. The piece also criticizes political leaders for failing to translate electoral victories into meaningful improvements for the youth, emphasizing the urgency of addressing unemployment to prevent the escalation of crime and insecurity.

The article outlines the initial steps for implementing an ISO 27001 project at DevEngineers, emphasizing the importance of a project kick-off meeting to align objectives, allocate resources, and assess risks. It highlights the need for a well-rounded team, including a dedicated leader, project manager, subject matter experts, and cross-functional representatives, to ensure successful implementation. The article stresses the significance of communication, collaboration, and training in fostering a security-conscious culture and achieving project milestones. It concludes by encouraging stakeholder engagement and celebrating team achievements to maintain motivation and drive the project's success.

The article discusses the process of establishing the internal and external context for a software development company named DevEngineers in Nigeria, as part of setting up an Information Security Management System (ISMS) compliant with ISO 27001. It outlines the company's structure, mission, values, services, and stakeholders, as well as the regulatory environment. The company's mission is to empower businesses with innovative and secure software solutions, and it has delivered over 100 custom software solutions. The article also introduces various products developed by DevEngineers, including SecureWebGuard, DataGuard+, and MobileSecure.

The article discusses the scope of implementing an Information Security Management System (ISMS) for DevEngineers, focusing on identifying and protecting critical assets such as intellectual property, client data, and information technology infrastructure. It outlines the steps to document the scope, including asset inventory and understanding interdependencies. Key assets include source code, user interface, trade secrets, trademarks, and patents. The article also highlights the importance of protecting client data, network infrastructure, hardware resources, development tools, cloud services, security infrastructure, and backup systems.

The article discusses the persistent issue of fatal encounters between Nigerian security agencies and dissenting groups, leading to civilian deaths. It references historical comments by Fela Anikulapo-Kuti about the sorrow and bloodshed associated with these agencies. Recently, confrontations between the police and the Shiites, as well as the DSS and IPOB, resulted in multiple fatalities. The author criticizes the Nigerian government's disregard for civilian life, especially when dealing with non-violent groups like IPOB. The article suggests that IPOB should reconsider its strategy to avoid unnecessary loss of life, as the Nigerian government has a history of responding with violence to unarmed groups while offering amnesty to armed militants. The author also comments on the legal status of IPOB and the actions of its leader, Nnamdi Kanu, urging the group to adhere to non-violence and legal processes.