Ethiopia Builds Stronger National Cyber Defences to Protect Critical Infrastructure

Ethiopia is strengthening its capacity to protect essential national systems as digitalisation becomes increasingly central to government services and economic activity. The country’s Critical Infrastructure Cybersecurity Proclamation No. 1426/2026 establishes a nationwide framework for identifying, protecting and monitoring infrastructure considered essential to national life and security. As reported by the Ethiopian News Agency (ENA), Information Network Security Administration (INSA) Director General Tigist Hamid said the legislation is designed to protect critical systems and citizen information while strengthening the country’s ability to prevent, respond to and recover from cyber incidents. The measure comes as Ethiopia expands digital services including digital identity, electronic payments and electronic procurement.

The new framework places greater responsibility on operators of critical infrastructure, covering 12 sectors: information and communication technology (ICT), financial services, security and public safety, transportation, education, health, water and energy, government services, emergency and disaster response services, agriculture, trade and commerce, and industry. Operators will be subject to 18 core cybersecurity obligations, including regular risk assessments, cybersecurity audits and institutional security requirements. The legislation also establishes a Critical Infrastructure Cybersecurity Fund to support protection programmes, research, innovation and skills development, while INSA will oversee standards, technical assistance and compliance mechanisms. The proclamation was ratified unanimously by the House of People’s Representatives before entering into force, underscoring broad institutional backing for the framework. This institutional approach indicates that Ethiopia is treating cybersecurity as an essential component of infrastructure governance rather than as a narrow technical issue.

The move is significant because the security of digital infrastructure is increasingly connected to the resilience of national economies and public institutions. As Ethiopia’s digital systems expand, disruptions to financial networks, government platforms, energy systems or other essential services could have consequences far beyond cyberspace. Building domestic regulatory institutions, technical expertise and response capabilities can therefore strengthen Ethiopia’s ability to manage the risks accompanying digital transformation. The country’s approach also reflects a wider African imperative to ensure that the continent’s digital expansion is supported by strong national institutions capable of protecting essential infrastructure and maintaining the continuity of critical services.