Cameroon’s digital infrastructure has experienced significant growth from 2019 to 2023, reshaping the nation’s economic and social landscape ( Figure 1 ). Internet penetration increased to 38% in 2023, up from 23.2% in 2019, with mobile internet subscribers surpassing 10 million users [4] . This expansion has been most notable in urban areas, where connectivity rates reached 65%, while rural areas remained at 22% [5] . The banking sector has undergone a remarkable digital transformation, with a 120% increase in digital transactions between 2019 and 2023, reaching a total transaction value of $5.2 billion [6] . Mobile money services have played a pivotal role in advancing financial inclusion, with registered accounts growing from 5.1 million in 2019 to 9.3 million in 2023, processing an average of 3.1 million daily transactions [7] .

E-commerce platforms in Cameroon have experienced significant growth, with online retail transactions increasing by 189% between 2020 and 2023 [8] . This expansion has been supported by the emergence of 112 new fintech companies, which collectively processed transactions worth $1.1 billion annually in 2023 [8] . Government digital services have also seen substantial progress, with 65 essential services now accessible online, up from 18 in 2019, improving service delivery efficiency by 40% [9] . However, this rapid digital transformation has exposed critical infrastructure to heightened cyber risks, as 58% of public sector systems lack robust cybersecurity measures [4] . The telecommunications sector has witnessed significant investment, with fiber optic network coverage expanding from 10,000 km in 2019 to 21,000 km in 2023, connecting 68% of administrative regions [5] . Despite this progress, 62% of networks operate without advanced threat detection systems, leaving them vulnerable to cyberattacks [10] .

The cybersecurity threat landscape in Cameroon has evolved significantly between 2020 and 2023, revealing critical vulnerabilities across multiple sectors ( Figure 2 ). Analysis of cyber incidents shows an alarming increase in sophisticated attacks targeting both public and private institutions). Ransomware attacks have emerged as a primary threat, increasing by 47% between 2020-2022, with the healthcare sector particularly vulnerable. Hospitals reported 156 ransomware incidents in 2022, resulting in an average system downtime of 72 hours and estimated losses of $12.3 million [11] . The education sector faced similar challenges, with 89 institutions experiencing ransomware attacks, affecting over 250,000 students and compromising sensitive academic records.

Financial fraud through digital platforms has become increasingly sophisticated, with 312 reported cases in 2022 alone. These incidents resulted in monetary losses exceeding $34.5 million, primarily affecting mobile money services and online banking platforms [12] . Analysis reveals that 67% of these attacks exploited inadequate authentication mechanisms, while 23% involved social engineering tactics targeting users and financial institution employees [6] .

State-sponsored cyber espionage has emerged as a growing concern. Intelligence reports identified 45 sophisticated Advanced Persistent Threat (APT) campaigns targeting critical infrastructure between 2021 and 2023. These attacks primarily targeted telecommunications infrastructure, energy management systems, and military communications networks, demonstrating increasing technical sophistication and persistence [11] .

Cameroon’s cybersecurity policy framework, primarily anchored by the 2010 Cybersecurity and Cybercrime Law, must improve when measured against international standards and emerging cyber threats. The African Union Cybersecurity Index (2023) ranks Cameroon’s legislative framework at 0.432 out of 1.0, significantly below the continental average of 0.587 [13] .

The current legal framework demonstrates substantial limitations in addressing emerging technologies. The law needs comprehensive provisions for cloud computing security, with no specific regulations governing data residency or cloud service provider obligations. Artificial intelligence and machine learning applications remain largely unregulated, creating significant vulnerabilities in automated systems and algorithmic decision-making processes [14] .

Blockchain and cryptocurrency technologies operate in a legal grey area, with no clear regulatory framework governing their security requirements. Analysis shows that 78% of cryptocurrency-related cyber incidents in 2022 occurred within regulatory blind spots [15] . The Internet of Things (IoT) security remains particularly problematic, with no mandatory security standards for connected devices, despite a 234% increase in IoT-related security breaches since 2020.

The enforcement framework needs to improve its effectiveness. The Cybercrime Investigation Unit operates with only 23% of the required personnel capacity and needs specialized digital forensics capabilities. Jurisdictional challenges further complicate enforcement, with 67% of cyber incidents involving cross-border elements that current mechanisms struggle to address [1] . Statistical analysis reveals that only 12% of reported cybersecurity violations result in a successful prosecution, compared to the African average of 34%) (“Cybercrime and cybersecurity in sub-Saharan African economies”, n.d).

The penalties framework has become increasingly obsolete, failing to deter modern cybercrimes adequately. Maximum fines for data breaches remain capped at levels set in 2010, representing only 0.1% of many organizations’ annual revenue. Corporate liability provisions lack clarity regarding parent company responsibilities for subsidiary security breaches, creating enforcement challenges in 45% of multinational corporations’ cases [16] .

The cybersecurity workforce deficit in Cameroon presents a critical challenge to national digital security. According to comprehensive research by Kearney, Africa needs more qualified professionals, with limited certified cybersecurity experts against an estimated requirement of 5,000. This deficit represents an 82% gap in required workforce capacity [17] .

The global cybersecurity workforce has grown to encompass 7.1 million professionals, although regional disparities remain pronounced. The Asia-Pacific region, dominated by India and China, boasts the largest absolute workforce, trailed by the Americas and Europe. The United States demonstrates unparalleled cybersecurity maturity, hosting 70% of the world’s cybersecurity vendors. Meanwhile, China and India are emerging as pivotal players in the cybersecurity domain. Conversely, Africa faces a stark shortage, with fewer than 300,000 professionals in the field [18] . These regional contrasts underscore global development patterns and reveal varying cybersecurity readiness worldwide. Tackling the cybersecurity workforce shortage demands a multifaceted strategy focused on attracting new talent, enhancing educational and professional development programs, and creating a supportive career growth and retention ecosystem. By prioritizing the recruitment of skilled professionals, expanding training opportunities, and fostering an environment where cybersecurity experts feel valued and supported, the industry can build a more robust and sustainable workforce. Collaborative efforts across these areas are vital to ensure the resilience and effectiveness of the cybersecurity workforce in the years ahead [18] ( Figure 3 ).

Cameroon’s cybersecurity incident response is anchored by its National Computer Emergency Response Team (CERT), operated under the National Agency for Information and Communication Technologies (ANTIC). This team plays a crucial role in detecting and addressing cyber threats, disseminating security alerts, and coordinating national efforts to manage cyber incidents. Complementing these efforts, the country has enacted a dedicated cybersecurity law, enabled thorough investigations, and fostered international collaboration in combating cybercrime. The average response time to cyber incidents is 72 hours, significantly exceeding the global average of 24 hours [19] .

On September 12, 2024, a significant data breach occurred at Cameroon’s National Social Security Fund (CNPS), carried out by a notorious hacking group known as SpaceBears. This cyberattack led to the unauthorized exposure of sensitive personal information belonging to millions of Cameroonian citizens. The breach raised serious concerns regarding the privacy and security of citizens’ data, as confidential details that could include identification numbers, financial records, and other private information were compromised, potentially putting individuals at risk for identity theft and fraud [20] . The breach has raised serious concerns about CNPS’s cybersecurity protocols and the broader vulnerability of national institutions to sophisticated attacks. The involvement of Huawei’s network infrastructure underscores potential weaknesses in the technical systems that support CNPS operations.

Cameroon has significant opportunities to modernize its cybersecurity policies to address the escalating cyber threats and align with global standards. By reforming its current frameworks, the country can position itself as a leader in digital resilience in the Central African region. Proposed reforms focus on three primary areas: aligning with international standards, adopting emerging technology regulations, and strengthening data protection frameworks.

One of the most impactful steps Cameroon could take is aligning its cybersecurity policies with the Budapest Convention on Cybercrime, the foremost international treaty that comprehensively addresses cybercrime. Adherence to this convention would enable Cameroon to benefit from established best practices and foster international cooperation in combating transnational cyber threats. Such alignment would also enhance the nation’s capacity to investigate, prosecute, and mitigate cybercrimes, which are often cross-border [21] .

Another critical reform involves implementing regulations tailored to address threats associated with emerging technologies, particularly artificial intelligence (AI). As AI-powered cyberattacks become increasingly sophisticated, Cameroon must enact AI-specific rules to govern AI systems’ ethical development and deployment. These regulations would safeguard users from potential AI-enabled cybercrimes and promote responsible innovation within the country [22] .

Lastly, enhancing data protection frameworks is essential for securing sensitive personal and institutional data. With the proliferation of digital services in Cameroon, robust data protection laws are necessary to ensure information confidentiality, integrity, and availability. Updating current legislation to include stricter compliance requirements and imposing penalties for data breaches would encourage organizations to prioritize cybersecurity. Strengthened data protection frameworks would also align Cameroon with global standards, such as the European Union’s General Data Protection Regulation (GDPR), facilitating smoother digital trade relations [22] . By aligning with international standards, addressing emerging technological threats, and enhancing data protection, Cameroon can significantly improve its resilience against cyber threats while promoting sustainable digital growth.

Building a skilled workforce and institutional capacity is critical to strengthening cybersecurity resilience in Cameroon. Recent initiatives underscore the country’s commitment to enhancing its technical expertise and fostering regional collaboration to address complex cyber threats. These efforts include partnerships with international organizations, establishing dedicated training facilities, and engaging in regional cooperation frameworks.

Its partnership with the International Telecommunication Union (ITU) is a notable development in Cameroon’s cybersecurity landscape. This collaboration focuses on delivering technical training programs to equip professionals with advanced cybersecurity skills. By leveraging ITU’s expertise, Cameroon aims to bridge its cybersecurity skills gap and develop a workforce capable of effectively identifying, preventing, and mitigating cyber threats. Such initiatives are instrumental in creating a pool of local experts who can contribute to national and regional cybersecurity objectives [4] .

Another significant advancement is the establishment of Cybersecurity Excellence Centers within Cameroon. These centers serve as hubs for cybersecurity research, training, and innovation. Equipped with modern infrastructure and resources, they aim to enhance knowledge transfer and foster technological innovation to combat evolving cyber threats. By providing hands-on training and encouraging collaborative research, these centers support the public and private sectors in developing robust cybersecurity practices.

Additionally, Cameroon’s active participation in regional collaboration through the United Nations Economic Commission for Africa (UNECA) highlights the importance of cross-border partnerships in addressing cybersecurity challenges. As cybercrime is a transnational issue, UNECA provides a platform for member states to share intelligence, harmonize cybersecurity policies, and coordinate responses to regional cyber threats. Cameroon’s engagement with UNECA reflects its recognition of the interconnected nature of cybersecurity and its commitment to collective security in Central Africa [23] . The partnership with ITU for technical training, the establishment of Cybersecurity Excellence Centers, and regional collaboration through UNECA demonstrate a strategic approach to addressing the nation’s cybersecurity challenges. Continued investment in these areas will enable Cameroon to strengthen its digital ecosystem and safeguard its critical infrastructure against emerging threats [23] .

As Cameroon continues its digital transformation, developing robust technical infrastructure is pivotal for securing its digital landscape. Planned improvements in technical infrastructure aim to address critical vulnerabilities and enhance the nation’s ability to detect, respond to, and mitigate cyber threats. These initiatives include establishing a national Computer Emergency Response Team (CERT), deploying modern data center infrastructure, and implementing advanced threat detection systems.

A key initiative in Cameroon’s cybersecurity roadmap is establishing a National Computer Emergency Response Team (CERT), scheduled for 2024-2025. A national CERT will be a central hub for coordinating responses to cyber incidents, conducting threat intelligence analysis, and disseminating security alerts to public and private stakeholders. By consolidating resources and expertise, the CERT will play a vital role in improving the nation’s preparedness and resilience against domestic and cross-border cyber threats. Its establishment marks a significant step toward aligning Cameroon’s cybersecurity framework with international best practices [22] .

Another critical area of focus is the development of modern data center infrastructure. With increasing reliance on digital platforms for essential services, secure and resilient data centers are vital for safeguarding sensitive information and ensuring uninterrupted service delivery. These new infrastructures will feature advanced encryption protocols, robust disaster recovery systems, and compliance with international security standards. Modernizing data centers reduces risks associated with data breaches and supports the growth of Cameroon’s digital economy by fostering trust among users and businesses [23] .

In addition to foundational improvements, Cameroon plans to deploy advanced threat detection systems to bolster its defensive capabilities. These systems, which leverage machine learning and artificial intelligence, are designed to identify and respond to cyber threats in real time. By enabling proactive monitoring and response, such technologies will enhance cybersecurity operations’ efficiency and reduce cyberattacks’ impact. These tools are particularly critical given the region’s rising sophistication of cybercriminal tactics [4] .

In conclusion, Cameroon’s planned technical infrastructure improvements represent a comprehensive strategy to strengthen its cybersecurity capabilities. Establishing a national CERT, modernizing data centers, and deploying advanced threat detection systems collectively demonstrate a forward-looking approach to safeguarding the nation’s digital assets and infrastructure. By implementing these measures, Cameroon can significantly enhance its cybersecurity posture and promote a secure digital environment for its citizens and businesses.

In the short term, Cameroon can implement focused measures to address immediate cybersecurity challenges while laying the foundation for long-term resilience. Three priority actions include establishing a national cybersecurity agency, implementing mandatory security audits, and launching public awareness campaigns. These actions strengthen institutional capacity, enhance organizational accountability, and foster a cybersecurity-conscious culture.

Creating a National Cybersecurity Agency is urgently needed to centralize and streamline Cameroon’s cybersecurity efforts. This agency would serve as the apex for coordinating all national cybersecurity initiatives, including policy development, threat intelligence, and crisis management. Its responsibilities would include:

Mandatory security audits across both public and private sectors can ensure organizations identify and mitigate vulnerabilities proactively. These audits would involve:

Public awareness campaigns are essential for educating citizens about common cyber threats and promoting safe online practices. These campaigns should target diverse demographics, including students, small business owners, and rural communities. Effective strategies could include:

Cameroon can further fortify its cybersecurity framework in the medium term through strategic initiatives targeting workforce development, infrastructure upgrades, and enhanced regional cooperation. These goals aim to build sustainable capabilities, strengthen critical systems, and promote collaborative approaches to counter cybersecurity threats [24] .

A skilled workforce is central to addressing the increasingly sophisticated nature of cyber threats. Cameroon should prioritize developing specialized training programs to produce a pool of certified cybersecurity professionals across various domains. Key initiatives include:

An example of this approach is Kenya’s Cybersecurity Academy, which annually provides industry-relevant training to thousands of IT professionals. Cameroon could establish similar programs through partnerships with institutions like the International Telecommunication Union (ITU) and the African Union Commission on Cybersecurity to ensure alignment with global standards. These programs will address the current shortage of cybersecurity professionals and create a sustainable talent pipeline to meet future demands [26] .

Critical infrastructure, such as energy, telecommunications, and banking systems, is a prime cyberattack target. Upgrading these systems with state-of-the-art cybersecurity technologies is essential for resilience.

An example is Nigeria’s ongoing efforts to secure its national energy grid through partnerships with international cybersecurity firms. Cameroon can adopt a similar approach to protect critical infrastructure in the energy, telecommunications, and banking sectors. Upgrading infrastructure will enhance the security of essential services and increase public trust in the digital ecosystem [28] .

Cybersecurity is a transnational issue; regional cooperation is vital for addressing threats that transcend borders. Cameroon should work closely with regional blocs like the Economic Community of Central African States (ECCAS) to strengthen cybersecurity coordination. Recommended actions include:

For example, ECOWAS (Economic Community of West African States) has implemented regional cybersecurity workshops and intelligence-sharing agreements among its member states. Cameroon could lead similar initiatives within ECCAS, fostering collective security in Central Africa. Strengthened regional cooperation will enable Cameroon to address cross-border cybercrimes more effectively and encourage a united front against global cyber threats [29] .

Cameroon must adopt long-term strategies emphasizing advanced technological capabilities, innovative research, and local solution development to achieve sustainable cybersecurity resilience. These strategies will ensure that the country’s cybersecurity framework evolves with emerging threats while fostering self-reliance and innovation. Key priorities include building advanced threat detection capabilities, establishing cybersecurity research centers, and developing indigenous security solutions [16] .

Cameroon must invest in advanced threat detection systems that utilize cutting-edge technologies to stay ahead of increasingly sophisticated cyber threats. This involves:

An example of such capabilities is Israel’s Cyber Defense Directorate, which employs AI-driven analytics to monitor critical systems and provide real-time insights into potential threats. Cameroon can partner with global cybersecurity firms or research institutions to implement similar systems tailored to its infrastructure [25] .

Establishing cybersecurity research centers is essential for fostering innovation, conducting advanced research, and training future cybersecurity professionals. These centers can focus on:

Relying on imported cybersecurity solutions can leave critical systems vulnerable to supply chain attacks or lack of customization. Cameroon should invest in developing indigenous security solutions that cater to its needs and the environment. This strategy includes: