Expert seeks unified cybersecurity standards to protect critical infrastructure Olorunfemi Agoye, a technology strategist and cybersecurity consultant, has restated the need for a unified cybersecurity approach to protect Nigeria’s critical infrastructure. Mr Olorunfemi said this on Monday in an interview, emphasising the cyberattacks on recent government agencies and financial institutions, which he described as deep structural weaknesses. He said cybersecurity was a national security imperative, stating that a digital economy without it is “like a city without law and order”, making it highly vulnerable. “Exposures involving the Corporate Affairs Commission, Sterling Bank, Remita, and Lagos State University have revealed a pattern that cuts across critical layers of Nigeria’s digital ecosystem. “What they collectively expose is not just vulnerability at the institutional level, but fragility at the architectural level. Digital systems across the public and private sectors often operate in silos. This fragmentation creates multiple points of weakness, entry points that sophisticated threat actors can exploit,” he said. He said the infrastructure supporting Nigeria’s accelerated digital transformation has not evolved, which could result in rapid growth of the digital landscape, and that this growth is marked by imbalance and systemic risks. He noted that while frameworks such as the National Cybersecurity Policy and Strategy 2021 provided a foundation, there was a need for more consistent implementation, enforcement and continuous validation. “All critical systems, public and private, must meet clearly defined baseline security requirements, supported by regular audits, real-time monitoring and mandatory compliance mechanisms. However, standards on their own are not enough; what matters is how effectively they are implemented,” he said. Mr Olorunfemi, who also works at the intersection of digital trust for the National Information Infrastructure Protection, also called for cross-sector coordination of digital security. He stressed that cybersecurity must be managed as a shared national responsibility, not an institutional