Cybersecurity

The Cybersecurity Department of the National Communications Authority (NCA) leads and coordinates national cybersecurity efforts in the Federal Republic of Somalia. Under the National Cybersecurity Law (2025), the National Communications Authority is designated as the highest government authority responsible for the governance and management of the country's cybersecurity and operational activities. The cybersecurity department plays a central role in protecting national digital infrastructure, strengthening cyber resilience, and supporting the safe and secure use of information and communication technologies across both public and private sectors.

Mandate and Key Responsibilities:

1. Development of Cybersecurity Regulatory Frameworks
   The department develops and implements national cybersecurity regulations, standards, and guidelines to protect Somalia's cyberspace and critical infrastructure. It supports the implementation of the Cybersecurity Law, establishes cybersecurity frameworks for public and private institutions, and defines security standards for critical information infrastructure.
2. Critical Information Infrastructure Protection
   The Cybersecurity Department is responsible for identifying and designating Critical Information Infrastructure (CII) that is essential to national security, economic stability, and public services. This includes sectors such as telecommunications, financial services, energy, water, transportation, and government digital systems. The department establishes cybersecurity standards for critical infrastructure operators, maintains a national register of designated infrastructures, and conducts inspections and compliance monitoring to ensure the implementation of cybersecurity measures and incident reporting obligations.
3. SOMCIRT Coordination and Operations
   The Cybersecurity Department oversees the Somalia Computer Emergency Response Team (SOMCIRT), which operates under the NCA as the national cyber incident response center. SOMCIRT is responsible for receiving and analyzing cyber incident reports, issuing alerts and advisories, coordinating national response efforts, and cooperating with international CERT organizations.
4. Licensing of Cybersecurity Service Providers and Professionals
   In accordance with the Cybersecurity Law, the NCA issues licenses to cybersecurity companies and registers and certifies cybersecurity professionals operating in Somalia. This ensures that cybersecurity services and tools meet required technical and professional standards.
5. Cybersecurity Awareness and Capacity Building
   The department leads national cybersecurity awareness campaigns and training programs to promote a cybersecurity mindset, improve digital safety practices, and strengthen cybersecurity skills across government institutions, private organizations, and the public.
6. Stakeholder Engagement and Coordination
   The Cybersecurity Department collaborates with government institutions, private sector organizations, critical infrastructure operators, academia, and international partners including OIC-CERT, AfricaCERT, FIRST, ITU and other global and regional cybersecurity organizations to strengthen cooperation, facilitate information sharing, and enhance national cyber resilience.

For more information please visit: somcirt.gov.so