Gov’t Must Move Beyond Traditional I.T. Security to Protect Operational Technology Systems – Sam George

The Ministry of Communication, Digital Technology and Innovations has reaffirmed the need for Ghana to move beyond traditional I.T. security and strengthen the resilience of the operational technology systems that keep essential services running.

Speaking at the Cyber Security Authority’s workshop on “Critical Information Infrastructure Resilience Beyond I.T.: Securing Ghana’s Operational Technology Ecosystem” in Accra, the Minister for Communication, Digital Technology and Innovations, Samuel Nartey George, said the security of Ghana’s digital systems is now inseparable from the security of essential services, including power, water, transport, health and financial services.

The Minister noted that while cybersecurity discussions have traditionally focused on I.T. systems such as databases, websites and enterprise networks, many of the systems that keep essential services operating rely on operational technology (OT), including industrial control systems, SCADA platforms, sensors and field devices.

“When an I.T. system is compromised, we may lose data. When an operational technology system is compromised, we may lose power, water and, in the worst cases, lives,” he said.

He said the government’s approach to protecting Critical Information Infrastructure (CII) is therefore centred on cyber resilience: the ability of critical institutions to anticipate threats, withstand attacks, recover essential services quickly and adapt when vulnerabilities are exposed.

“We must move from asking, ‘How do we protect our critical systems?’ to asking, ‘How do we ensure that Ghana continues to function when our critical digital systems come under attack?'”

The Minister further stressed that compliance with Ghana’s cybersecurity requirements is not optional. With 13 designated CII sectors and about 200 institutions identified as CII Owners, he said the regulatory framework must be matched by effective implementation and accountability.

He announced that the government will continue to back the Cyber Security Authority’s regulatory and enforcement mandate, deepen collaboration with sector ministries and regulators, support the development of a skilled national cybersecurity workforce, and keep the country’s policy and regulatory frameworks responsive to emerging threats, including those enabled by artificial intelligence.

Addressing Board Chairs and Chief Executives, the Minister emphasised that cyber resilience cannot be left solely to technical teams.

“Accountability for cyber resilience sits with you. It cannot be delegated to the I.T. department alone. Cyber resilience must be a whole-of-organisation responsibility, led from the top.”

Click to read more: https://opemsuo.com/author/hajara-fuseini/