NITDA tightens cybersecurity rules for MDAs, mandates DNS security assessments
AI Executive Briefing
Gemini Flash AI~45s readThe National Information Technology Development Agency (NITDA) has integrated DNSSEC into its mandatory cybersecurity assessment framework for all MDAs. This policy shift aims to secure government digital infrastructure by ensuring that all .gov.ng domains are digitally signed and authenticated.
Context & Background
- ✦Nigeria is facing a significant rise in cyber threats, with local organizations experiencing an average of 4,361 attempted cyberattacks weekly as of June.
- ✦The initiative is part of a broader effort to secure Nigeria's digital foundation, following the official unveiling of DNSSEC for the .ng domain earlier in the year.
Key Figures & Named Entities
•Kashifu Inuwa Abdullahi (NITDA Director General) stated that government institutions must secure and sign their domain names.•Adesola Akinsanya (NiRA President) noted that digital payment fraud reached N25.85 billion in 2025.
Outlook & Next Steps
Government institutions are expected to review domain security, implement multi-factor authentication, and ensure technical competence in DNSSEC implementation to avoid service disruptions.
Key Takeaways
AI Summary- NITDA has mandated the inclusion of DNSSEC in cybersecurity assessment criteria for all Nigerian Ministries, Departments, and Agencies (MDAs).
- Government institutions using the .gov.ng domain are now required to sign their domains with digital signatures to verify authenticity and prevent tampering.
- Experts warn that DNSSEC implementation requires high technical competence to avoid website accessibility issues and must be paired with other security measures.
Key Facts:April 2025: Nigeria officially unveiled DNS Security Extensions (DNSSEC) for the .ng domain.2025: Digital payment fraud in Nigeria amounted to N25.85 billion.
Editorial Excerpt
The National Information Technology Development Agency (NITDA) has made Domain Name System Security Extensions (DNSSEC) part of its cybersecurity
Frequently Asked Questions About This Story
What is the primary purpose of DNSSEC for government websites?
DNSSEC uses digital signatures to verify the authenticity of domain name records, ensuring that DNS responses have not been tampered with.
Does DNSSEC provide comprehensive protection against all cyber threats?
No. It does not encrypt internet traffic, prevent distributed denial-of-service (DDoS) attacks, or protect against compromised registrar credentials; it must be used alongside other security measures.
