1.1 Introduction
Cybersecurity is defined as the practice of protecting systems, networks, and data from digital attacks, unauthorized access, and other cyber threats (Adebayo, 2021). In today's digital era, the reliance on information and communication technology has increased exponentially, making cybersecurity not just a technical issue but a critical societal concern. As individuals, organizations, and governments adopt digital tools for communication, financial transactions, and service delivery, they inadvertently expose themselves to a growing array of cyber threats, ranging from phishing attacks and malware infections to ransomware and identity theft (Nwakpa & Eze, 2020).
In Nigeria, the telecommunications sector, regulated by the Nigerian Communications Commission (NCC), serves as the backbone of digital communication and connectivity. However, despite technological advancements, many users in the country remain inadequately informed about cybersecurity risks, safe online practices, and the mechanisms for reporting and responding to threats. This lack of awareness increases vulnerability, with both personal and institutional data being at risk of compromise. On the other hand, current cybersecurity awareness initiatives, often delivered through workshops, seminars, and public campaigns, are limited in reach and effectiveness, failing to engage a broad spectrum of the population (Ogunleye, 2022).
As a prelude to other parts of this study, this chapter will discuss the background upon which this study was initiated, the statement of problems that led to this study, the Aim and Objectives of the study. Others are Significance of the study, Scope of work, Limitation of the study and Definition of technical terms.
1.2 Background of Study
The evolution of cybersecurity awareness initiatives can be traced alongside the rapid growth of digital technologies worldwide. Cybersecurity, as a discipline, emerged in response to the increasing frequency and sophistication of cyber-attacks targeting both individuals and institutions. According to Adebayo (2021), the concept of cybersecurity awareness began gaining prominence in the early 2000s, as organizations realized that technological defenses alone were insufficient to prevent breaches. The human element, including user behavior and decision-making, was identified as a critical vulnerability, prompting the development of educational programs and awareness campaigns to mitigate cyber risks.
In Nigeria, the Nigerian Communications Commission (NCC) has historically played a central role in regulating the telecommunications sector and promoting digital literacy. It is reported that in the late 2000s, the NCC initiated basic public sensitization programs aimed at educating users on safe online practices, the risks of phishing, and general cyber hygiene (Nwakpa & Eze, 2020). These early efforts, while valuable, were largely delivered through physical workshops, seminars, and broadcast media, which limited accessibility for a broad spectrum of users, particularly in rural areas.
Over time, technological advancements and the increased penetration of mobile internet services highlighted the need for more interactive and scalable approaches to cybersecurity education. Ogunleye (2022) asserted that the rise of digital platforms, social media, and mobile applications presented opportunities for the creation of centralized awareness platforms capable of reaching diverse user groups effectively. Such platforms are able to deliver real-time information, personalized guidance, and scenario-based learning, which are more engaging and effective compared to traditional methods (Ogunleye, 2022).
Cybersecurity has emerged as a critical concern in the global digital landscape, with increasing incidents of cyber-attacks targeting individuals, businesses, and government institutions. According to Adebayo (2021), the rapid expansion of internet use and digital services has heightened the exposure of users to cyber threats such as phishing, malware, ransomware, and identity theft. It is reported that in Nigeria, the telecommunications sector remains a key enabler of national development, with the Nigerian Communications Commission (NCC) overseeing its regulation and growth (Nwakpa & Eze, 2020). However, studies have indicated that many Nigerians exhibit low levels of cybersecurity literacy, resulting in risky online behaviors such as sharing passwords, falling for phishing scams, and failing to implement basic security measures. Ogunleye (2022) asserted that while awareness campaigns and training programs exist, their reach and effectiveness are limited due to fragmented delivery methods, outdated materials, and insufficient engagement strategies.
Furthermore, scholars contend that human factors are central to cybersecurity challenges, with social engineering and user negligence being primary causes of breaches (Nwakpa & Eze, 2020). It is stated that technology alone is insufficient to prevent cyber incidents; rather, creating a culture of cybersecurity awareness and continuous learning among users is critical. On the other hand, interactive and centralized platforms are affirmed to offer significant potential in addressing these gaps by providing timely information, personalized guidance, and scenario-based training. Such platforms support proactive risk mitigation, improve compliance with security best practices, and enable regulatory bodies like the NCC to monitor and evaluate the effectiveness of awareness initiatives. It is against this backdrop that this study is set against the backdrop of research that the development of a dedicated cybersecurity awareness platform for the NCC is therefore essential to enhance digital literacy, reduce human-related vulnerabilities, and promote a safer digital ecosystem in Nigeria.
1.3 Statement of Problems
Based on the investigation conducted, the implemented system encounters a number of challenges, with some of the most significant issues outlined below.
- The existing channels of communication are fragmented, and users frequently rely on unreliable or informal sources for cyber security guidance.
- Many traditional awareness approaches are often outdated, insufficiently engaging, or inaccessible to the broader population, resulting in limited behavioral change among end users.
- Furthermore, there is a lack of tools that offer personalized learning, scenario-based training, and timely alerts on emerging threats, all of which are essential for building a culture of proactive security awareness.
- Lastly, some people, especially young users and small business owners, still underestimate the seriousness of cyber risks, believing that attacks only target large organizations.
1.4 Aim and Objectives of Study
The aim of this study is to design and implement a cybersecurity awareness platform that effectively educates, engages, and empowers users under the jurisdiction of the Nigerian Communications Commission (NCC). In achieving this aim, the following specific objectives were laid out as follows:
- To design features that allow personalized learning paths, real-time alerts, and performance tracking for effective user engagement.
- To create a centralized and interactive platform that provides comprehensive cybersecurity awareness to Nigerian users.
- To develop user-friendly learning modules and resources that enhance knowledge of cyber threats and safe online practices.
- To implement a scalable system that can be accessed across multiple devices and reaches diverse demographic groups, including educational institutions and organizations.
- To evaluate the effectiveness of the platform in improving cybersecurity knowledge, promoting safe digital behavior, and encouraging peer-to-peer knowledge sharing among users.
1.5 Significance of Study
The deployment of the proposed system will hold significant relevance in the following ways.
- The platform will enhance knowledge of cybersecurity risks, safe practices, and proactive response mechanisms.
- The system will streamline awareness campaigns, improve reach, and provide real-time monitoring of user engagement.
- The platform will contribute to a more security-conscious user base, reducing operational risks and data breaches.
- The study will provide data and insights for further research on cybersecurity awareness strategies in Nigeria.
- The platform will inform policy development, highlighting effective methods to promote digital security across the nation.
1.6 Scope of the Study
The study focuses on the development and implementation of a cybersecurity awareness platform within Nigeria, specifically targeting the users regulated and monitored by the Nigerian Communications Commission (NCC). The platform is designed to cater to a diverse audience including individual subscribers, small businesses, and organizational staff who rely on digital communication services.
1.7 Limitations of the Study
During the course of this study, many things militated against its completion, some of which are:
- Time Constraint: The time frame given to accomplish this project was very short due to school academic calendar and it was carried out under pressure which made the researcher not to implement some necessary features.
- Financial Constraint: Insufficient fund tends to impede the efficiency of the researcher in sourcing for the relevant materials, literature or information and in the process of data collection (internet, questionnaire and interview).
1.8 Definition of Terms
Awareness Platform:
An awareness platform is a digital tool designed to educate and inform users about specific risks, provide training, and monitor engagement to enhance knowledge and behavioral change (Ogunleye, 2022).
Cybersecurity:
Cybersecurity is defined as the practice of protecting computer systems, networks, and digital information from unauthorized access, attacks, and damage (Adebayo, 2021).
Nigerian Communications Commission (NCC):
The NCC is the regulatory authority responsible for overseeing the telecommunications sector in Nigeria, ensuring compliance with national standards and promoting digital literacy (Nwakpa & Eze, 2020).
Digital Literacy:
Digital literacy refers to the ability to effectively and safely use digital tools, understand cyber threats, and apply knowledge to protect personal and organizational data (Adebayo, 2021).
Phishing:
Phishing is a cyber-attack technique where attackers deceive users into providing sensitive information such as passwords or banking details by impersonating legitimate entities (Ogunleye, 2022).
…
