In a significant step towards enhancing data protection and privacy compliance in Nigeria, the Nigeria Data Protection Commission (NDPC) has signed a Memorandum of Understanding (MoU) with the Data and Knowledge Information Privacy Protection Initiative (DKIPPI).

The agreement, formalized at a ceremony attended by key stakeholders, aims to deepen collaboration between both organizations in promoting awareness, compliance, and privacy protection across the country.

Speaking at the event, the National Commissioner/CEO of NDPC, Dr Vincent Olatunji, described the MoU as a historic milestone for the Commission. He acknowledged Mr Tokunbo Smith, President of DKIPPI, for his unwavering support since the Commission’s inception. Dr Olatunji highlighted Mr Smith’s key contributions to the development of the Nigeria Data Protection Act, the Strategic Roadmap and Action Plan (SRAP), and the General Application and Implementation Directive (GAID)—all of which serve as foundational frameworks for data protection in the country.

“This partnership formalizes our shared commitment to advancing data privacy, compliance, and awareness across Nigeria. As data protection takes center stage globally, this collaboration will further strengthen Nigeria’s stance in the digital economy,” Dr Olatunji stated.

On his part, Mr Tokunbo Smith reaffirmed DKIPPI’s dedication to supporting the Commission, pledging even greater efforts in shaping Nigeria’s data privacy ecosystem. “Data protection and privacy are becoming increasingly critical worldwide. We remain committed to making a lasting impact in ensuring compliance and security within Nigeria’s digital space,” he said.

In recognition of Dr Olatunji’s leadership in spearheading data protection initiatives in Nigeria, Mr Smith presented him with an honorary award, naming him an Ambassador of the Data and Knowledge Information Privacy Protection Initiative.

The MoU marks another step in Nigeria’s journey towards robust data governance, ensuring that the country aligns with global best practices in information privacy and security.

By Javvad Malik, Lead Security Awareness Advocate at KnowBe4 (www.KnowBe4.com).

Have you ever walked down a street with broken windows, burnt out cars, graffiti and felt a bit uneasy? There’s a reason for that, and it’s not just about aesthetics. The Broken Windows Theory, introduced by social scientists James Q. Wilson and George L. Kelling in 1982, suggests that visible signs of crime and antisocial behavior encourage further crime and disorder. But what does this have to do with cybersecurity? More than you might think.

The Cybersecurity Parallel: Neglected Digital Environments

In many organizations, cybersecurity awareness feels like a losing battle. Employees ignore security policies, download unapproved software, and use weak passwords. It’s as if our digital environments are full of “broken windows,” signaling that it’s a culture where no one really cares about security.

Traditional approaches often focus on punitive measures or dry, technical training that fails to engage employees. It’s like trying to reduce crime by simply increasing fines, without addressing the underlying issues that make an area feel unsafe or neglected.

Applying the Broken Windows Theory to Cybersecurity

Just as fixing broken windows and cleaning up graffiti can reduce crime by fostering a sense of order and care, we can apply similar principles to our digital environments:

1. Create a Culture of Vigilance: Encourage employees to report potential security issues, no matter how small. This is like neighborhood watch programs for your network.
2. Address Small Issues Quickly: Respond promptly to minor security infractions. This shows that security is taken seriously at all levels.
3. Improve the “Look and Feel” of Security: Make security tools and processes user-friendly and aesthetically pleasing. A clean, well-designed security interface is like a well-maintained storefront.
4. Celebrate Security Wins: Publicly recognise employees who spot phishing attempts or follow good security practices. This is akin to community awards for neighborhood improvement.

Practical Steps for Implementation

1. Conduct a Digital Environment Audit

Walk through your organization’s digital spaces as an average user would. Where are the “broken windows”? Look for outdated software, clunky security processes, or confusing policies.

2. Implement a “See Something, Say Something” Program

Create an easy way for employees to report potential security issues. Make it as simple as sending a quick message or clicking a button.

3. Redesign Security Communications

Transform your security awareness materials. Replace dense text with infographics, short videos, or even memes. Make security information as engaging as a well-designed public space.

4. Create Security Champions

Identify and empower individuals across departments to be security advocates. These champions can help maintain a secure “neighborhood” in their area of the organization.

5. Regular “Digital Community” Events

Host regular cybersecurity events that feel more like community gatherings than lectures. Think cybersecurity fairs, hacking demos, or even escape rooms with a security twist.

The Path to a Strong Security Culture

By applying the principles of the Broken Windows Theory to cybersecurity, we can create digital environments where security feels natural and everyone plays a part. It’s not just about preventing breaches; it’s about fostering a community where secure behavior is the norm.

As we move forward, let’s reimagine our approach to cybersecurity awareness. Instead of building walls and enforcing rules, let’s create digital neighborhoods where everyone takes pride in keeping things secure.

Every fixed “window” in your digital environment is a step towards a more secure future. So, let’s roll up our sleeves and start cleaning up our digital streets. The neighborhood—and your data—will thank you.