Cybersecurity in Cape Verde: A New Era of Digital Protection

Digital transformation has brought countless benefits to public administration, the business sector and the daily lives of citizens. However, it has also brought new risks, such as computer crime, cyber attacks, digital fraud, and leaks of sensitive data. With the aim of addressing these challenges, Cape Verde approved Decree-Law No. 9/2021 of 29 January, which establishes the Cape Verdean Legal Regime for Cybersecurity.

What is the Cape Verdean Legal Framework for Cybersecurity?

It is the set of rules established by Decree-Law No. 9/2021, of 29 January, which defines how Cape Verde organises, protects and responds to risks and threats in its digital space.

This regime aims to guarantee the security of networks and information systems, ensuring the availability, integrity, confidentiality and resilience of digital data and services in the country.

This regime applies not only to public administration, but also to private entities that provide services considered essential or digital, such as:

• Energy and water suppliers
• Health services
• Banks and financial institutions
• Telecommunications operators
• Among others

 Main pillars of Decree-Law No. 9/2021:

National Cybersecurity Centre: This is the body created to coordinate, monitor and promote cybersecurity actions at national level. It acts as a national and international point of contact for cybersecurity incidents.

Responsibilities of public and private entities: All organisations covered must adopt appropriate technical and organisational measures for risk management, incident prevention and mandatory reporting of security breaches to the National Cybersecurity Centre.

Mandatory incident reporting: Whenever an incident with a significant impact occurs, the responsible entity must promptly report it to the National Cybersecurity Centre so that containment and response measures can be taken.

Training and awareness: The scheme encourages digital literacy campaigns and continuous training to strengthen the culture of cybersecurity among employees, public entities and citizens.

National and international cooperation: The law highlights the importance of Cape Verde cooperating with other jurisdictions, regional and international organisations, promoting the exchange of information and best practices.

Why is this law relevant to Cape Verde?

The creation of this legal framework represents a strategic step towards positioning Cape Verde as a modern, secure and attractive country for digital business. It is a direct response to the growing risks of cyberspace, protecting:

• The country’s critical infrastructure;
• The expanding digital economy;
• Privacy and citizens’ rights.

Furthermore, the diploma is aligned with international best practices and regional commitments within the Economic Community of West African States (ECOWAS) and the European Union, ensuring greater interoperability and digital trust..

In conclusion…

Cybersecurity is no longer just a technological issue: it is a matter of national sovereignty, public trust, and sustainable development. Decree-Law No. 9/2021 shows that Cape Verde is attentive to the challenges of the present and committed to a more secure digital future.