Nigeria’s cybersecurity stakeholders, including the Office of the National Security Adviser (ONSA), the Nigerian Communications Commission (NCC), the Economic and Financial Crimes Commission (EFCC) and the National Information Technology Development Agency (NITDA), are advocating stronger cyber resilience as artificial intelligence continues to reshape the threat landscape.
The growing use of AI-powered tools has created new opportunities for innovation, but it has also introduced additional risks. Cybercriminals can exploit these technologies to develop more convincing phishing messages, imitate trusted individuals, generate fraudulent communications and automate aspects of cyberattacks.
Consequently, strengthening cyber resilience has become increasingly important for protecting government systems, telecommunications infrastructure, financial services, businesses and personal information. The emphasis is shifting beyond preventing attacks to ensuring that organisations can detect threats quickly, contain damage and restore operations when security incidents occur.
AI Is Changing the Cybersecurity Landscape
Artificial intelligence is changing how organisations operate, communicate and deliver services. However, the same capabilities that support legitimate digital activities can also be abused by malicious actors.
One major concern is the growing sophistication of phishing and impersonation attacks. Criminals can use AI-generated text to produce convincing messages that imitate banks, public institutions, business executives and other trusted sources.
Similarly, synthetic audio and video can be used to impersonate individuals, potentially enabling fraudsters to manipulate employees, deceive customers or spread misleading information.
AI can also help attackers automate repetitive tasks, analyse publicly available information and tailor fraudulent messages to particular targets. These capabilities can make some attacks more difficult to identify through traditional security awareness measures alone.
As a result, organisations cannot rely exclusively on identifying spelling errors, suspicious wording or other familiar signs of fraudulent communication. Instead, they need layered security measures that combine technical controls, staff awareness and clear verification procedures.
Why Cyber Resilience Matters
Cybersecurity traditionally places considerable emphasis on preventing unauthorised access and stopping malicious activity. Cyber resilience takes a broader approach by considering how organisations prepare for, withstand, respond to and recover from attacks.
This distinction is particularly important for institutions responsible for essential services and sensitive information. Even organisations with sophisticated security systems may experience incidents, making preparation and recovery planning essential.
A resilient organisation should be able to identify unusual activity, isolate affected systems, preserve relevant evidence and restore critical services without allowing an incident to spread unnecessarily.
Regular security assessments, tested backup arrangements, incident-response plans and clear communication procedures can help reduce disruption when attacks occur.
Furthermore, organisations need to review their security arrangements regularly because cyber threats continue to evolve. Measures that address yesterday’s attack methods may not adequately protect systems against new techniques.
The Role of ONSA, NCC, EFCC and NITDA
The involvement of security, telecommunications, law enforcement and digital development institutions reflects the cross-sector nature of cybersecurity threats.
The Office of the National Security Adviser has a national security coordination role, making cyber threats relevant to broader efforts to protect critical infrastructure and national interests.
The Nigerian Communications Commission plays a regulatory role in the telecommunications sector, where protecting network integrity and maintaining reliable communications are important to the wider digital economy.
Meanwhile, the Economic and Financial Crimes Commission has a law enforcement role in addressing financial crimes, including offences involving digital platforms and electronic transactions. Cooperation between investigators, financial institutions and technology providers can help strengthen the response to cyber-enabled fraud.
NITDA, which supports information technology development and digital governance, also has a role in promoting cybersecurity awareness, responsible technology adoption and stronger digital practices.
Although their responsibilities differ, collaboration among these institutions and other stakeholders can help improve information sharing, coordinate responses and strengthen the protection of digital services.
Effective collaboration is especially important when cyber incidents cross institutional or sectoral boundaries. An attack may begin with a fraudulent message, compromise an employee’s account, expose sensitive information and eventually disrupt a wider network of services.
Addressing such incidents may require technical specialists, regulators, law enforcement agencies and affected organisations to work together.
Financial Institutions and Businesses Face Growing Risks
Businesses and financial institutions remain attractive targets for cybercriminals because their systems may contain valuable personal information, payment details, confidential records and commercially sensitive data.
AI-generated impersonation can make business email compromise and payment diversion schemes more convincing. For example, a fraudulent request that appears to come from a senior executive or trusted supplier may pressure an employee into transferring money or disclosing confidential information.
Organisations can reduce these risks by requiring independent verification for sensitive financial instructions, enforcing multi-factor authentication and limiting access to critical systems.
They should also establish clear procedures for reporting suspicious messages and suspected security incidents. Employees need to know that they can verify unusual requests through an independent channel without fear of unnecessary delays or criticism.
For smaller businesses, basic safeguards can make a meaningful difference. Strong passwords, software updates, secure backups, access controls and regular staff training provide an important foundation for more advanced security measures.
Building Cybersecurity Awareness Among Nigerians
Technology alone cannot eliminate cybersecurity risks. Human decisions remain an important part of how many attacks begin and how successfully they spread.
Members of the public need to understand that AI-generated messages, voices and videos may appear authentic even when they are fraudulent. They should be cautious about sharing sensitive information, clicking unexpected links or responding to urgent requests for money.
Individuals should also verify unusual claims directly with the people or organisations involved, particularly when a message creates pressure to act immediately.
For public institutions and businesses, awareness programmes should extend beyond occasional training sessions. Regular exercises, practical demonstrations and clear reporting channels can help employees recognise suspicious activity and respond appropriately.
Cybersecurity communication must also keep pace with changing threats. As criminals adopt new AI tools, public education should explain emerging risks in accessible language and provide practical steps people can take to protect themselves.
The Need for Responsible AI Adoption
The response to AI-enabled cyber threats should not discourage the legitimate use of artificial intelligence. Instead, it should encourage organisations to adopt the technology with appropriate safeguards.
AI can support defensive cybersecurity by helping security teams analyse large volumes of activity, identify unusual patterns and prioritise potential threats. However, these systems also require oversight because automated tools can produce false alarms, overlook suspicious behaviour or generate inaccurate assessments.
Organisations should therefore combine automated detection with human review, established security procedures and regular testing.
They must also consider how the AI systems they deploy access and process sensitive information. Poorly secured tools can create additional exposure if users enter confidential data into unsuitable platforms or grant applications excessive permissions.
A responsible approach requires organisations to assess risks before deployment, monitor systems after implementation and ensure that staff understand the limits of the technology.
Turning Advocacy Into Practical Action
Calls for stronger cyber resilience will have the greatest impact when translated into measurable improvements across the public and private sectors.
Institutions need to identify their most critical systems, assess their vulnerabilities and establish clear plans for responding to incidents. They should test those plans rather than assuming that written procedures will work effectively during a real attack.
Information sharing is equally important. Timely communication about emerging threats can help organisations recognise attack patterns and strengthen their defences before similar incidents affect other institutions.
Furthermore, sustained investment in cybersecurity skills will be necessary to build the workforce required to protect increasingly complex digital infrastructure. Training should cover technical expertise, risk management, incident response and public awareness.
Organisations must also review their relationships with third-party technology providers because vulnerabilities in external services can create risks for otherwise well-protected systems.
Conclusion
The push by ONSA, NCC, EFCC, NITDA and other stakeholders for stronger cyber resilience highlights the importance of adapting Nigeria’s cybersecurity approach to an evolving threat environment.
AI-generated attacks can make fraud and impersonation more convincing, increasing the need for reliable verification procedures, stronger technical safeguards and better-informed users. At the same time, effective protection requires cooperation among government institutions, businesses, telecommunications providers and the public.
Ultimately, cyber resilience depends on preparation as much as prevention. By improving threat detection, strengthening incident response, investing in skills and promoting responsible AI adoption, organisations can reduce their exposure to cyberattacks and improve their ability to recover when incidents occur.
About The Author
