Nigeria took the initial concrete steps this month toward creating its own sovereign data centers and cloud services, as more African nations accelerate the digitalization of their economies with an eye toward cybersecurity.
Last week, the western African nation established the Joint Technical Committee of the National Sovereign Cloud Initiative (JTC-NSCI), an effort to expatriate data back within its borders and to break its reliance on foreign data storage and cloud providers. The sovereign cloud initiative is also designed to boost national security and help Nigeria create a deep expertise, Kashifu Inuwa, director general of NITDA and co-chairman of the JTC-NSCI, said in an Aug. 20 statement.
“As a nation, we should determine our digital future,” he said. “We should have control over our data. We should have control over our algorithms, our AI, and all our transactions.”
Sovereignty of data, technology infrastructure, and technical capabilities have become increasingly sought after by nations — not just in Africa, but worldwide. In part, the initiatives are a reaction to US legislation that can give the government access to foreign data. The past year’s restrictions on exporting the most powerful AI chips and AI models to other countries has likewise caused nations to look to strengthen domestic capabilities.
The United Arab Emirates, for example, has worked with Microsoft, OpenAI, Nvidia and other companies to start building a large 5 gigawatt AI capability, dubbed Stargate UAE, managed by the Middle Eastern nation’s technology service provider, G42. The United Kingdom has pushed for sovereign AI services and an AI defense capability after the Trump administration placed short-lived export restrictions on Anthropic’s most capable AI models. Japan has partnered with Microsoft to build AI compute and data centers, the latest nation in the Asia-Pacific to work with hyperscalers to expand domestic capacity.
A “National Framework for Trusted Cloud Adoption”
Nigeria’s initiative aims to allow the country to create its own national cloud infrastructure that boosts the nation’s digital-transformation efforts in the areas of government services, finances, AI, and the national economy, NITDA stated in its announcement. The JTC-NSCI will promote a cloud-first policy using the domestic capabilities as a way to cut costs, attract $750 million in investment over the next two years to build out the infrastructure, and establish compliance and certification requirements for data security, according to the Federal Ministry of Communications, Innovation & Digital Economy.
Nigeria is the third largest economy in Africa with a gross domestic product estimated at $377 billion. Source: International Monetary Fund, April 2026
While data residency and sovereign cloud infrastructure addresses national economic and security concerns, the certification is the important step that needs to be taken, says Paul Barbosa, vice president of cloud security and SASE for Check Point, because what matters is whether the provider or their customer can prevent, detect, and respond to attacks in real time.
“Where I get cautious is when residency becomes a proxy for security, and certification becomes a one-time audit rather than an ongoing discipline,” he says. “We tell governments the same thing we tell enterprises: location plus a badge is not a security architecture.”
Nigeria’s approach is promising because the government is not just requiring data residency or local cloud providers. Adding requirements and technical certification — especially if frequently checked and updated — promises to improve security, says Ian Van Rensburg, head of security engineering for Africa at Check Point Software.
“Many countries already have extensive cyber security and data-protection policies — the challenge is translating those policies into consistent technical controls and measurable outcomes across government,” he says. “Nigeria’s approach has the potential to achieve this because the initiative brings together technology, procurement, budgeting, and government administration, rather than treating sovereign cloud purely as an IT project.”
Sovereign Done Right Can Boost Security
The country certainly is in the crosshair. Nigeria, the third largest economy in Africa estimated at $377 billion by the International Monetary Fund, has faced increasing cyberattacks, not only from cybercriminals but also from nation-states with interests in the region. While Africa currently ranks third in weekly attacks per organization in the region — behind Latin America and Asia — Nigeria has often been the most attacked country, although Angola surpassed it in both June and July 2026, according to Check Point Software Technologies’ August threat landscape report. In addition, government agencies are the second-most targeted organizations, behind the education sector, according to the report.
Nigeria’s government has felt the growth in attacks firsthand, NITDA’s Inuwa said in an August 4 statement promoting various cybersecurity measures.
“We have watched websites of government organizations defaced, hijacked and quietly redirected to gambling sites,” he said. “We have seen coordinated ransomware attacks force government web portals to shut down and witnessed repeated attacks on government databases leading to data exfiltration and abuse of personal data.”
Yet, localization of technical capabilities only work when resilience is a priority and security a requirement, says Lior Atar, chief information security officer at Dream, a sovereign AI provider.
Creating sovereign capabilities can reduce fragmentation and make infrastructure operations more efficient, but also requires continuous monitoring, effective incident response, hardening, and local expertise, he says.
“The key is verification,” Atar says. “If certification requires providers to demonstrate the effectiveness of their controls continuously, through ongoing monitoring, testing, and real consequences for failure, citizen data will be measurably safer.”
With AI automation, attackers have become more agile, more pernicious, and more persistent, says Atar. Governments face a dual challenges: They must first close basic weaknesses that continue to provide attackers with easy points of entry, while also creating their own AI-resilient and powered defenses that can foil adversaries that operate at greater speed, scale, and autonomy.
“Sovereign infrastructure gives a nation a defined perimeter it can actually see and defend as a whole, instead of a scattered surface nobody owns,” he says. “But that same defined perimeter also tells the adversary exactly where to aim. Defending it becomes a national mission.”
