NCA Issues Warning to Critical Infrastructure Operators

NCA leaders have approved the National Cyber Security Risk Management Framework – a step to enhance the digital security of Somalia

Moqdisho, Somalia – The National Communications Authority (NCA) has announced the National Cyber Security Risk Management Framework, aimed at strengthening the digital security of the country and protecting Critical Infrastructures that impact national security, the economy, and social services.

This new framework, prepared in June 2026, will serve as the official structure through which the Federal Government of Somalia will manage cyber security risks, based on international standards ISO/IEC 27005 and ISO/IEC 27001.

What is the importance of this framework?

Somalia has made significant progress in digitalization, including modernizing government services, expanding communication infrastructures, and enhancing financial services. However, this progress has increased cyber security risks that could affect data, systems, and public trust.

This new framework defines how agencies will identify, assess, and prioritize cyber security risks using a qualitative assessment based on Business Impact Levels.

Who does it apply to?

All government and private sector agencies managing Critical Infrastructures are required to implement this framework, submitting an annual report to the National Communications Authority. The Cyber Security Law of Somalia also clarifies this responsibility.

How are risks managed?

The framework presents four methods for addressing risks:

Risk Avoidance – stopping an operation or service that poses a risk.

Risk Mitigation – implementing controls to reduce the risk.

Risk Transfer – transferring the risk to a service provider or third party.

Risk Acceptance – accepting the risk if it is below an acceptable level.

What is the overall impact?

This framework represents a strategic step to enhance the resilience of the country's cyber security, protect data, and sustain essential services. It is also expected to increase public trust and national security overall.

The National Communications Authority calls on all operators to seriously implement this framework and submit their annual reports to contribute to the efforts of digital security in Somalia.

For more details, visit: https://nca.gov.so

The post NCA Issues Warning to Critical Infrastructure Operators first appeared on Radio Dalsan .