Collaboration key to Sierra Leone鈥檚 first national cyber security strategy
Published 9 March 2021
漏 Crown copyright 2021
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: [email protected].
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at /government/publications/commonwealth-cyber-programme-country-case-studies/collaboration-key-to-sierra-leones-first-national-cyber-security-strategy
Sierra Leone鈥檚 Ministry of Information and Communication has produced a first draft of its cyber security strategy, in collaboration with the private sector.
As cyber threats grow in scale and complexity, most Commonwealth countries find themselves ranked low on . This means they are unable to safeguard their own interests or cooperate internationally.
Francis Sesay, the Information, Communications and Technology Manager for Sierra Leone Cable, who works closely with the Ministry of Information and Communication, explained that three dimensions of society are at risk, 鈥淭he government, the country鈥檚 businesses and connected citizens.鈥�
The Foreign and Commonwealth Office鈥檚 (FCO) Commonwealth Cyber Security Programme has benefited every Commonwealth country in some way, helping many to put in place national Cyber strategies, legislation and Critical Information Infrastructure Protection (CIIP) plans. 鈥淚t was a shock to us when we attended the [regional Commonwealth National Cyber Security Incident Response conference in Accra, Ghana in 2019 and saw a lot of African countries were way ahead of us,鈥� said Francis.
Identifying capacity gaps
The Accra conference was one of three regional workshops organised by the Commonwealth Cyber Security Programme. Francis was invited by his government to accompany Mariama Yormah, from Sierra Leone鈥檚 Ministry of Information and Communication. 鈥淭he workshop was an eye opener. It gave us confidence鈥�.it helped us understand what we needed to do and how.鈥�
Following the Accra workshop, Sierra Leone completed the SIM3 capacity assessment. This has helped them see the gaps in their cyber security, and where they need to focus in developing their country鈥檚 cyber security strategy and incident response capacity.
Sierra Leone鈥檚 commitment
Howie Nichol from Torchlight, who facilitated the regional cybersecurity incident response conferences, explained, 鈥淥ne of the challenges delegates have had to overcome is persuading their decision-makers to allocate resources and sufficiently prioritise cyber security, 鈥� Francis agreed. 鈥淔rom 2006, it was difficult to get decisions and we are still trying to encourage joint private sector investment.鈥�
Francis sees new opportunities since the new government came into power in 2018.
They have given cyber security the first real push鈥� they want digital to transform the economy and have published a in 2019.
The strategy covers not only education, health and justice, entrepreneurship and society but also cyber security. It has given the Ministry of Information and Communication leverage to demand resources for a cyber security strategy.
In the last month, with guidance from the Commonwealth Cyber Security Programme, Sierra Leone completed a first draft of its national cyber security strategy. It will be completed later this year. 鈥淲e recruited a consultant from Ghana and he conducted many consultative interviews.
Just two weeks ago in mid-March, we presented the strategy to government officials and the private sector,鈥� said Francis. He pointed out, 鈥淭here were many comments and suggestions that will be incorporated into a new draft and will be presented to the Ministry of Information and Communications shortly.
Francis also added, 鈥淭he Commonwealth Cyber Security Programme was an excellent forum for technical assistance, advice and networking 鈥� it鈥檚 helped us a lot.鈥�
Collaboration is key
Developing a national cyber security strategy is the government鈥檚 responsibility, but it is a process that involves consultation and participation from the private sector and civil society. 鈥淚f the government takes a lead on its own then there is scepticism. Everyone needs to be involved,鈥� explained Francis. His company, Sierra Leone Cable, is an important government partner in spearheading action on cyber security, 鈥淲e manage Sierra Leone鈥檚 fibre optic infrastructure. We have to be involved.鈥�
Recognising the importance of collaboration between different stakeholders, the Ministry of Information invited key leaders in the private sector and civil society to a workshop. Here they discussed the results of the initial capacity assessment of Sierra Leone鈥檚 cyber security capability. 鈥淎 lot of data has been collected so we need to demonstrate, security, confidentiality and data protection measures.鈥� The government then organised individual meetings with different sectors: banking, telecommunications, insurance and industry. 鈥淪ome sectors were eager to work together but others see themselves as competitors, 鈥� said Francis.
CHOGM theme: A more secure future
Project title: The Cyber Security Programme
Country: Sierra Leone
Implementing partners: Torchlight, Global Partners Digital, Protection Group International