Online Correspondent
The Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) is developing a cybersecurity framework to strengthen the protection of critical infrastructure, as the country moves to secure essential services against emerging digital threats.
The initiative, titled “Development of a Cybersecurity Framework for Critical Infrastructure Protection”, seeks to strengthen cybersecurity governance, improve institutional accountability and enhance the resilience of systems underpinning Zimbabwe’s digital economy.
The project is being implemented under the ICT Policy and Regulation – Institutional Strengthening (iPRIS) initiative, which brings together regulatory authorities and experts to exchange knowledge and improve institutional capacity.
POTRAZ participated in the eighth iPRIS Cohort follow-up phase in Nairobi, Kenya, where representatives from Africa and Europe reviewed progress on national initiatives and explored practical solutions to emerging digital challenges.
Zimbabwe was represented by Benita Moyo, Tendai Mapaona, Tineyi Mathew Chiwambutsa and Tanyaradzwa Angellah Johnson, who are working on the country’s cybersecurity framework.
Speaking during the exchange, Ms Johnson emphasised the need to incorporate cybersecurity and privacy safeguards as emerging technologies and digital services become more widespread.
“As we look at emerging technologies through strategic foresight, we also have to consider the cybersecurity and privacy implications,” she said.
“If we are going to digitise services such as healthcare, we need to put measures in place to ensure that sensitive information is protected and that people can continue to enjoy their privacy.”
Ms Johnson also outlined Zimbabwe’s legislative approach to cybersecurity and cybercrime, noting that the country’s Cybersecurity Act incorporates cybercrime definitions alongside cybersecurity provisions.
“In Zimbabwe, our Cybersecurity Act incorporates cybercrime definitions alongside cybersecurity provisions, bringing both into one piece of legislation,” she said.
Cybersecurity researcher and Stockholm University lecturer Professor Fredrik Blix said effective protection required more than technical safeguards, highlighting the importance of organisational practices and governance.
“Zimbabwe’s draft regulation provides a good example of cybersecurity governance. It is important not only to list technical controls, but also to address organisational practices and governance,” he said.
This underscores the importance of establishing clear responsibilities and accountability among operators of critical infrastructure to ensure that cybersecurity risks are effectively managed.
Beyond the framework, POTRAZ has also stressed the need for organisations to comply with Zimbabwe’s Cyber and Data Protection Act, particularly licensing requirements for data controllers processing personal information.
