CRITICAL NATIONAL INFRASTRUTURE (CNI) ORDER

A Policy designates critical national infrastructures and requires protections against cyber threats and sabotage. It targets government agencies and private operators to adopt strong security measures. The policy aims to safeguard vital sectors like power and finance for national stability.

What Is This Policy?

The CNI Order, 2024 is Nigeria’s official policy that says “these infrastructures are too important to fail”. It legally protects power, finance, ICT, health, transport, and other vital systems from cyber threats and physical sabotage.

Who Does It Target?

The CNI Order mainly targets government agencies, private sector operators, and critical databases to ensure they adopt strong protection measures.

What Does It Aim to Achieve?

It aims to protect Nigeria’s most vital infrastructures from electricity and banking systems to health and transport by legally designating them as critical and requiring strong cybersecurity and physical safeguards.

Key Features

Designation of Critical Sectors: Officially identifies 13 sectors as critical national infrastructure Cybersecurity Integration: Extends Parts II & III of the Cybercrimes Amendment Act, 2024, which deal with designation and protection of critical ICT systems.

Current Status

Rollout Stage: Designation stage Coverage: applies nationwide Beneficiaries to Date: government, private operators and citizens Funding: revenues generated

Important Terms

Term 1- Critical National Information Infrastructure (CNI) ICT systems, networks, and assets deemed vital to Nigeria’s national security, economy, and public safety. Their incapacitation or destruction would have a debilitating impact on essential services. Term 2- Protection Plan Mandates the development of sector-specific strategies to safeguard CNII. Requires trusted information-sharing frameworks between government and private operators. Term 3- Cybercrimes Act (2015, amended 2024) The legal backbone of the Order.

Official Resources

National Cybersecurity Coordination Centre (NCCC) Website: https://nccc.gov.ng Email: [email protected] Phone: +234 818 333 3933 Address: Office of the National Security Adviser, National Assembly Complex, Three Arms Zone, Central Business District, FCT Abuja, Nigeria Office of the National Security Adviser (ONSA) Address: National Assembly Complex, Three Arms Zone, Central Business District, FCT Abuja. Federal Government Gazette (Official Publication) Available through the Government Printer’s Office and official gazette archives. 📞 Contact Points NCCC Helpdesk: For incident reporting and inquiries on cybersecurity coordination. ONSA Secretariat: For policy and implementation updates. Sector Regulators: (e.g., Nigerian Electricity Regulatory Commission, Central Bank of Nigeria, Nigerian Communications Commission) for sector-specific compliance.

Legal Framework

The Critical National Infrastructure (CNI) Protection Order 2024 is issued under the Cybercrimes (Prohibition, Prevention, etc.) Act 2015, the Terrorism (Prevention and Prohibition) Act 2022, and the President's constitutional authority under Section 5 of the 1999 Constitution. It aligns with the National Cybersecurity Policy and Strategy 2021, the National Security Agencies Act, and international CNI protection frameworks from NIST Cybersecurity Framework and ENISA (European Union Agency for Cybersecurity) guidelines.