Mozambique Strengthens Cybersecurity Governance with New Law and National CSIRT Expansion

Mozambique has highlighted significant progress in strengthening its national cybersecurity framework during the C-Days 2026 conference held in Portugal, according to the National Institute of Information and Communication Technology (INTIC) . The country used the platform to showcase recent reforms and ongoing initiatives aimed at improving digital security and resilience.

Speaking at a panel dedicated to cybersecurity development within the Community of Portuguese-Language Countries (CPLP), INTIC Chairman Prof. Dr. Lourino Chemane outlined Mozambique’s key advancements over the past year. He placed particular emphasis on the adoption of the Cyber Security Act, describing it as a major milestone in the country’s digital governance journey.

The new legislation establishes the National Cyber Security Council as a strategic coordination body and designates INTIC as the National Cyber Security Authority. It also introduces the National Cyber Security System to ensure coordinated action among stakeholders, as well as a National Cybersecurity Network to enhance collaboration between public and private sector entities.

Prof. Chemane further noted that the law introduces mandatory cybersecurity incident reporting, aimed at improving national response capabilities and threat mitigation. In addition, it provides for the creation of a National Cyber Security Fund to support strategic investments in the sector.

On the international front, Mozambique reaffirmed its commitment to global and regional cooperation in cybersecurity. The country has ratified the Malabo Convention on Cyber Security and Data Protection and has been invited to join the Budapest Convention on Cybercrime. It has also signed the United Nations Convention against Cybercrime, which is currently undergoing ratification.

INTIC also highlighted ongoing efforts to strengthen technical capacity, including training programs for cybersecurity professionals and Cyber Security Incident Response Teams (CSIRTs). Support from international partners, including Portugal’s National Cybersecurity Centre, was acknowledged for contributing to skills development and operational readiness.

Mozambique’s participation in regional and global cybersecurity networks, such as SADC, AfricaCERT, and FIRST, was also emphasized as a key factor in improving information sharing and incident response capabilities.

Looking ahead, the country is developing its National Cyber Security Strategy for 2026–2030 with support from the Government of Finland. The strategy is expected to address emerging threats, particularly those linked to artificial intelligence and increasingly sophisticated cyberattacks.

INTIC also announced plans to strengthen national cybersecurity infrastructure with support from the World Bank and other partners, including the consolidation of the National CSIRT. Additionally, Mozambique is preparing to host the Mozambique International Cyber Security Week in Maputo in November 2026, which is expected to serve as a major regional platform for cybersecurity dialogue and cooperation.

The institute further stressed the importance of regulating the Cyber Security Act, particularly in relation to protecting critical infrastructure and essential services, while also calling for stronger cooperation within the CPLP to address shared challenges in digital sovereignty and cyber governance.