Strong Cybersecurity Governance Key To Protecting Critical Assets — Durodoye

The chief executive officer of Cybernovr Nigeria Limited, Dr Kazeem Durodoye, has stressed the need for strong cybersecurity governance frameworks to protect critical national and organisational assets amid growing cyber threats.

Durodoye spoke against the backdrop of Cybernovr Limited’s certification under ISO/IEC 27001:2022 for its Information Security Management System (ISMS), covering information security, governance, risk and compliance, and cyber resilience.

He said effective cybersecurity governance requires clear policies, standards and guidelines to ensure that cyber risks are properly identified, assessed and managed.

According to him, well-defined governance structures are essential for coordinating cybersecurity efforts and ensuring accountability in the protection of critical information and digital assets.

Durodoye said cybersecurity governance should complement the deployment of security technologies by providing clear direction on risk management, compliance and organisational responsibilities.

He said organisations must regularly assess their exposure to cyber risks and ensure that appropriate controls are in place to prevent, detect and respond to security incidents.

Durodoye added that cybersecurity should not be treated solely as a technical responsibility, stressing that management must play a central role in establishing policies and ensuring compliance.

He said the growing dependence on digital systems had made cybersecurity governance an important component of organisational risk management.

The ISO/IEC 27001:2022 certification covers Cybernovr’s Information Security Management System and provides a structured framework for managing information security risks and protecting sensitive information.

Durodoye, who has more than 30 years’ experience in the information and communications technology sector, said his involvement in several national cybersecurity initiatives had reinforced the need for stronger governance and coordinated responses to emerging cyber threats.

According to him, his engagements have included the development of Nigeria’s National Cybersecurity Policy and Strategy, the NCC-CSIRT and the Central Bank of Nigeria’s eNaira project.

He is also a World Bank cybersecurity consultant for Nigeria’s communications sector and holds a PhD in Information Systems and Business from the University of Ibadan.

The certification comes as organisations face increasing cybersecurity risks from the growing use of digital systems, making stronger information security controls and governance frameworks critical to protecting sensitive data and digital infrastructure.