Cybersecurity Failures and Board Liability: What Directors and Executives Must Know

In this publication, TEMPLARS Partner, Ronke Sokefun, and Associates, Francis Jarigo and Onyinye Omenugha examine how this position is reinforced by Nigeria’s legal framework. The Cybercrimes Act, the Nigeria Data Protection Act 2023, sector regulations, and directors’ duties under CAMA all converge on one point: where failures stem from weak controls or poor oversight, liability can extend beyond the company to its leadership. The focus is on whether the board exercised proper care.

To mitigate this risk, cybersecurity must be embedded into governance and risk management, not treated as a compliance add-on. Boards that take a structured, disciplined approach to oversight and regulatory alignment will be better placed to limit exposure, protect value, and sustain market confidence.