CSA and Ernst & Young Ghana Resolve Licensing Dispute

The Cyber Security Authority (CSA) and Ernst & Young (EY) Ghana have announced the resolution of regulatory issues surrounding the firm’s licensing requirements for providing cybersecurity services.

In a joint statement issued in Accra on Tuesday, the two parties confirmed that constructive engagements had clarified matters relating to licence fees and administrative requirements.

“Subsequently, regulatory issues between the CSA and EY Ghana have been satisfactorily resolved,” the statement said.

The announcement follows months of engagement after the CSA fined EY Ghana GH¢360,000 in March 2026 for providing regulated cybersecurity services without a valid Cybersecurity Service Provider (CSP) licence.

At the time, the Authority said EY continued to deliver services, including to owners of Critical Information Infrastructure (CII), despite repeated directives to comply with the Cybersecurity Act, 2020 (Act 1038). EY was ordered to cease operations until licensed, confirm cessation in writing, and complete its licence application.

Both institutions described the process as collaborative and committed to supporting Ghana’s cybersecurity regulatory framework going forward.

The CSA reiterated that its mandate is not only to enforce compliance but also to support organisations in understanding and meeting their obligations.

It said it remained committed to building a secure, resilient and trusted digital ecosystem through effective regulation, responsible industry participation and strong enforcement of Ghana’s cybersecurity laws.

Margaret Adjeley Sowah, ISD