29 Aug Compliance with NLRC Risk-Based Cybersecurity Framework

NOTICE TO ALL LICENSED OPERATORS IN THE NIGERIAN GAMING INDUSTRY

Compliance with NLRC Risk-Based Cybersecurity Framework

The National Lottery Regulatory Commission (NLRC) is committed to ensuring the highest standards of cybersecurity across all licensed operators in the gaming industry.

In line with our mandate to protect the integrity of the gaming environment and safeguard the interests of all stakeholders, the NLRC has developed and issued the Risk-Based Cybersecurity Framework.

This framework outlines the necessary requirements that all licensed operators must implement to mitigate cybersecurity risks and protect their operations against potential threats.

New Compliance Deadline: October 31, 2024

Please be informed that the deadline for full compliance with the NLRC Risk-Based Cybersecurity Framework has been set for October 31, 2024. All licensed operators are thus required to complete their compliance processes by this date.

Importance and Benefits of Compliance

Compliance with the NLRC Risk-Based Cybersecurity Framework is not only a regulatory requirement but also a critical step towards enhancing the security and resilience of your gaming operations. By adhering to the framework, operators will benefit from:

• Enhanced Security: Implementation of robust security controls to protect sensitive data and systems from cyber threats.
• Regulatory Assurance: Assurance that your operations meet the regulatory standards required by the NLRC.
• Customer Trust: Increased trust and confidence from customers who can be assured that their data and transactions are secure.
• Operational Resilience: Strengthened ability to prevent, detect, and respond to cybersecurity incidents, thereby reducing downtime and potential financial losses.
• Reputation Management: Protecting your brand’s reputation by demonstrating a commitment to cybersecurity and responsible operations.

Next Steps

All licensed operators are strongly encouraged to engage with the NLRC’s appointed technical consultants to ensure timely and effective compliance. Operators who have already initiated the compliance process are advised to accelerate their efforts to meet the October 31, 2024 deadline.

Failure to comply with the NLRC Risk-Based Cybersecurity Framework by the stipulated deadline will result in regulatory actions, including but not limited to penalties, suspension, or revocation of licenses.

Contact Information

For any inquiries or further clarification regarding the compliance process, please contact the NLRC at cybersec@nlrc-gov.ng or reach out to the pre–appointed technical consultants directly.

The NLRC remains committed to supporting all licensed operators in achieving full compliance and ensuring the continued integrity and security of the Nigerian gaming industry.

SIGNED: NLRC MANAGEMENT