The Cyber Security Authority (CSA) and EY Ghana have resolved regulatory matters regarding the licensing requirements for providing cybersecurity services following constructive engagements between the two parties.
The resolution follows a GH¢360,000 fine imposed by the CSA on EY Ghana for providing regulated cybersecurity services without a valid licence.
In a joint statement issued on Tuesday, August 18, the CSA and EY Ghana said discussions had been held to clarify and address issues relating to licence fees and associated administrative requirements.
“Subsequently, regulatory issues between the CSA and EY Ghana have been satisfactorily resolved,” the statement said.
The penalty followed what the CSA described as EY Ghana’s failure to comply with repeated directives to regularise its operations under the Cybersecurity Act, 2020 (Act 1038).
In a statement issued on Tuesday, August 18, the Authority said EY Ghana had continued providing cybersecurity services, including services to owners of Critical Information Infrastructure (CII), despite being directed to obtain the necessary licence.
The CSA said it instructed EY Ghana in a letter dated March 20, 2026, to submit an application for a Cybersecurity Service Provider (CSP) licence within 15 days.
The Authority said the subsequent engagement between the two institutions had resulted in the clarification and resolution of the regulatory issues.
The CSA reiterated that its mandate was not only to enforce compliance but also to support organisations in understanding and meeting their regulatory obligations.
It said it remained committed to building a secure, resilient and trusted digital ecosystem through effective regulation, responsible industry participation and strong enforcement of Ghana’s cybersecurity laws.
The CSA and EY Ghana also expressed their commitment to supporting Ghana’s cybersecurity regulatory framework and welcomed the collaborative approach that led to the resolution of the matter.
