Why Rwanda Is Ahead of the Rest in Cybersecurity in Africa
While there is a growing concern about cyber threats across Africa, some countries appear to be ahead of others in mitigation efforts. One shining example is Rwanda. The East African nation's government has provided an enviable legislative framework to fight cybercrime. It all started with the government's push to tackle unemployment by giving its citizens access to the global job market.
Rwanda created a National Computer Security and Response Center in 2015 through a national cyber security policy. The center is charged with the role of preventing, detecting, and responding to security threats. It is one of the few countries in the region with a comprehensive National Cyber Contingency Plan to tackle cyber crises.
The country’s telecom network security regulations ensure service providers are properly licensed and responsible for securing their infrastructure to maintain integrity and guarantee the confidentiality of their services. Thus, they must have incident management teams that will work with the government to manage cyber security threats.
In addition, in 2016, Rwanda passed an information and communications law that contains provisions on cybercrime and computer misuse. The law criminalizes unauthorized data access. These laws provide a foundation for a solid regulatory framework, which many other African countries lack. The regulations are further strengthened through sensitization programs that encourage citizens to inform authorities if they hear or suspect an ongoing cybercrime.
Rwanda’s National Cybersecurity Strategy 2024—2029
The government of Rwanda is already thinking ahead and recently unveiled a cybersecurity strategy that builds on existing policies to safeguard its investment in Information and Communications Technology (ICT) which the country views as a cornerstone for national economic growth. The Rwandan government sees ICT as an enabler of economic growth that will help improve the standard of living of its citizens. The seven key objectives of the document include:
Consolidate the national cybersecurity framework: enhance the roles, responsibilities, and legal obligations of national entities
Increase Rwanda’s cyber risk management capability: equips the nation with the tools, techniques and approaches to monitor, identify, and mitigate cyber risks.
Make Rwanda ready for cybersecurity challenges: place the country on constant alert to respond to cyber incidents and emergencies.
Protect critical national infrastructures and essential services: support the operators of critical national infrastructures to properly secure their assets.
Embed cybersecurity in the national culture: integrate cybersecurity in education to equip citizens to be participants in cybersecurity.
Build a cybersecurity industry: make cybersecurity more effective to become a revenue stream for the citizens and its entrepreneurs.
Promote international cooperation: create safer cybersecurity by working with regional and international partners.
What Rwanda has done differently
In the 2024 Global Cybersecurity Index (GCI) released by the International Telecommunication Union (ITU), Rwanda was ranked in the “Role-modeling” tier together with Uganda and Kenya, the highest rank achieved by any African nation.
Rwanda has one of the best cybersecurity coordination on the continent, a feat it achieves through the National Cyber Security Authority (NCSA). The NCSA ensures private sector players and government agencies are aligned in the protection of the country’s digital infrastructure.
The Rwandan government has also made significant investment in building a workforce of skilled cybersecurity experts. Expanded skilled workforce is instrumental in the detection, prevention, and response to cyber threats.
By having a legislature that compels service providers—and by extension, companies—to take responsibility of guaranteeing the safety of their data, Rwanda has indirectly opened the door for the building of capacity. Companies are forced to train staff on cybersecurity and invest in cybersecurity awareness which makes them less susceptible to scammers.
References
National Cybersecurity Strategy of the Republic of Rwanda 2024-2029. https://cyber.gov.rw/index.php?eID=dumpFile&t=f&f=427&token=6375c4cab9b091a9747cd9f07f8dc616ba825245
Rwanda CERT. https://cert.gov.rw/home
National Cyber Security Authority. https://cyber.gov.rw/home/