The Cyber Security Authority (CSA) has called for a broader approach to cybersecurity that extends beyond conventional information technology (IT) systems to include operational technologies that underpin Ghana’s critical infrastructure and essential services.
The call was made during an event organised as part of the National Cybersecurity Awareness Month (NCSAM) 2026, in partnership with Cybershield, under the theme “CII Resilience Beyond IT: Securing Ghana’s Operational Technology Ecosystem.”
Speaking at the event, the Director-General of the CSA, Dr Divine Selase Agbeti, stressed the need for organisations responsible for critical infrastructure to strengthen their cyber resilience and ensure that operational systems remain protected against emerging cyber threats.
According to him, cybersecurity efforts must not focus solely on conventional IT infrastructure, as disruptions to operational technology (OT) systems could have significant consequences for essential services and critical sectors.
He identified risk management as a key component of effective cyber resilience, emphasising the importance of conducting comprehensive risk assessments to identify potential vulnerabilities and determine the appropriate controls and investments.
“Risk assessment enables organisations to prioritise controls and investments according to business, operational, safety and national impact, rather than simply responding to individual technical vulnerabilities,” Dr Agbeti explained.
He said a risk-based approach would allow organisations to better understand the potential consequences of cyber incidents and allocate resources to areas where they could have the greatest impact on resilience.
The event brought together key stakeholders to discuss strategies for strengthening the protection of Ghana’s critical information infrastructure and operational technology ecosystem.
Participants examined the need for closer collaboration among regulators, technology experts, operators of critical infrastructure and other stakeholders to improve preparedness for cyber incidents.
The discussions also focused on the importance of ensuring that critical sectors have the capacity not only to prevent cyberattacks, but also to withstand, respond to and recover from disruptions when they occur.
The CSA has increasingly emphasised the need for organisations to adopt proactive cybersecurity measures as Ghana’s digital transformation expands across critical sectors of the economy.
The event therefore provided an opportunity for stakeholders to deepen their understanding of operational technology risks and explore practical approaches to improving resilience across Ghana’s critical infrastructure.
The CSA said strengthening cyber resilience would require sustained investment in risk management, appropriate security controls, stakeholder collaboration and preparedness to ensure that essential services can continue operating in the face of evolving cyber threats.