NITDA tightens cybersecurity rules for MDAs, mandates DNS security assessments

The National Information Technology Development Agency (NITDA) has incorporated Domain Name System Security Extensions (DNSSEC) into its cybersecurity assessment framework for all Ministries, Departments and Agencies (MDAs) in Nigeria. DNSSEC adds digital signatures to domain name records to verify authenticity and protect against cyberattacks.

The agency called upon government websites using the .gov.ng domain to adopt DNSSEC, which is an extension to the Domain Name System (DNS) that translates domain names into numerical addresses. NITDA Director General, Kashifu Inuwa Abdullahi, emphasized the importance of securing domain names, not just registering them. However, NITDA chief Oluwasegun Falayan warned that implementing DNSSEC without proper technical expertise could create issues like website inaccessibility for users.

NiRA President, Adesola Akinsanya, stated that DNSSEC is crucial for safeguarding Nigeria's digital infrastructure but must be used alongside other cybersecurity measures. Akinsanya highlighted the economic impact of weak digital security, citing Check Point's data that Nigerian organizations faced about 4,361 attempted cyberattacks weekly in June, compared to the global average of 2,270.

He also pointed out that digital payment fraud amounted to N25.85 billion in 2025, despite a decline in reported incidents. Akinsanya urged government institutions to review their domain name security, enforce proper access controls, and activate multi-factor authentication to mitigate unauthorized changes. Nigeria officially implemented DNSSEC on the .ng domain in April to enhance its digital security framework and join other countries adopting advanced cybersecurity technologies.