CMM Review Ghana (as part of the Global Cybersecurity Capacity Program I)

Summary

The Global Cyber Security Capacity Centre (GCSCC) helped the government of Ghana to conduct a national cybersecurity capacity assessment using the Cybersecurity Capacity Maturity Model for Nations (CMM) in 2018.

Details

Aim

The aim of the project was to help Ghana conduct a review of their national cybersecurity readiness and prioritise the areas for further action to strengthen capacity.

Context

The GCSCC published the Cybersecurity Capacity Maturity Model for Nations (CMM) in 2016 to help nations understand what works, what does not work and why, across all areas of cybersecurity capacity. This aims to enable governments and enterprises to adopt policies and make investments that have the potential to significantly enhance safety and security in cyberspace.  The updated CMM  was applied for the assessment.

The GCSCC’s support to a CMM in Ghana was funded by the United Kingdom, Korea-World Bank Group Partnership Facility (KWPF) under its Global Cybersecurity Capacity Program, and Norwegian Institute of International Affairs (NUPI).

Outcomes

After the CMM’s findings the government took several steps to increase its cybersecurity maturity; for instance, the development a cybersecurity culture, including events such as National Cybersecurity Month in October 2018 and the implementation of a nationwide programme to address cybercrime-awareness gaps in cooperation with UNICEF.

In December 2018 Ghana acceded to the Budapest Convention after the CMM report had identified ad-hoc informal and formal cooperation mechanisms and limited capacity of prosecutors and judges to handle cybercrime cases and cases involving digital evidence. This gap was further addressed by the continuation of training for judges and prosecutors as part of the Council of Europe’s GLACY+ Project.

Outputs

The CMM report was completed in 2018. A summary of the CMM’s findings and information on follow-on action was included in the World Bank’s report ‘Global Cybersecurity Capacity Program: Lessons Learned and Recommendations Towards Strengthening the Program’.

Activities

At the invitation of the Ministry of Communications (MoC), a GCSCC team travelled to Accra in January 2018 to assist with the review through modified focus-group discussions according to the CMM review methodology (see image below and https://gcscc.ox.ac.uk/cmm-review-process). Representatives from the US Department of State and MITRE Corporation joined the review as observers.

MAIN WEBSITE LINK

• Ghana | Global Cyber Security Capacity Centre (ox.ac.uk)

Other website links

• Cybersecurity Capacity Maturity Model Assessment Held | Ministry of Communications (moc.gov.gh)

Image courtesy of the GCSCC