Ghana’s Cyber Security Authority Calls for Responsible Journalism on Cyber Threats

Key Takeaways

• Media practitioners are urged to verify information before publishing on cyber‑crimes and system vulnerabilities.
• Premature disclosure can aid attackers and jeopardise ongoing investigations.
• Thirteen sectors, including banking, energy and health, are classified as Critical Information Infrastructure.
• Early reporting of mobile‑money fraud through the CSA toll‑free line can prevent loss of funds.

During a training session under the National Community Media Cyber Capacity Building Project, Alex Awere‑Kyere, senior manager for Critical Information Infrastructure at the Cyber Security Authority, emphasized the delicate balance between public awareness and operational security. He warned that unverified or premature reporting could unintentionally equip cyber‑criminals with actionable intelligence.

The session, co‑hosted by the Africa Centre for Digital Transformation and the Government of the Czech Republic, highlighted procedural safeguards for journalists handling sensitive cyber‑incident data. Participants received guidance on engaging the CSA before publication to ensure that critical details are managed responsibly.

Balancing Public Interest and Security

Journalists serve a vital function in exposing threats and educating the populace, yet the timing and framing of such information can influence the efficacy of law‑enforcement responses. Awere‑Kyere noted that disclosure of a system’s weakness before a patch is deployed offers a clear roadmap for exploitation, potentially expanding the scope of an attack.

He recommended a protocol whereby reporters with access to confidential cyber‑incident details consult the CSA or relevant agencies. This collaborative approach enables authorities to assess the risk of exposure while preserving the public’s right to be informed about genuine threats.

Critical Information Infrastructure and Economic Impact

The CSA has identified thirteen sectors as Critical Information Infrastructure, reflecting their strategic importance to Ghana’s national security and economic stability. Disruption in banking, energy, water or health services could cascade beyond the immediate organization, affecting supply chains and public confidence.

Understanding the interdependence of these sectors underscores the necessity for precise reporting. Overstating vulnerabilities may trigger unwarranted panic, while understating them can leave users exposed to unchecked risks.

Combatting Mobile‑Money Fraud

Mobile‑money platforms have become a focal point for fraudsters leveraging stolen personal data. Awere‑Kyere urged citizens to report suspicious activity to the CSA via the toll‑free number 292 before completing transactions. Early intervention increases the likelihood of halting fraudulent transfers and facilitates coordinated action through the Joint Cybersecurity Committee.

The Committee, mandated by the Cybersecurity Act 2020, unites the CSA, Bank of Ghana, National Communications Authority, Economic and Organised Crime Office, Ghana Army and the police’s Criminal Investigations Department. Its multidisciplinary mandate addresses both the technical exploitation and the underlying data‑theft mechanisms that feed fraud schemes.

Looking Ahead

The training program will move to Kumasi in September, extending its reach to a broader cohort of media professionals. Ongoing capacity‑building aims to embed a culture of responsible cyber reporting that safeguards investigations while informing the public.

As Ghana’s digital economy expands, the partnership between the CSA and the media sector will be pivotal in pre‑empting threats, reinforcing public trust, and preserving the integrity of critical national services.