Nigeria Mandates Third-Party Certification for Government Software
NITDA introduces a risk-tiered quality assurance system to standardize software deployment across federal institutions by 2027.
The National Information Technology Development Agency (NITDA) of Nigeria has unveiled the National Software Quality Assurance (SQA) Framework to standardize the design, testing, and deployment of software. The initiative establishes a mandatory regulatory hurdle for all Federal Government institutions and regulated industries, requiring independent third-party certification before any IT project can receive official clearance.
Under the new mandate, software projects are divided into three distinct risk tiers to determine the level of scrutiny required. Class A is reserved for high-risk critical infrastructure, such as power grids and core banking systems; Class B covers moderate-risk enterprise platforms; and Class C applies to low-risk internal tools. To ensure technical rigor, the framework requires adherence to structured software development life cycles, OWASP secure coding practices, and WCAG 2.1 AA accessibility compliance for all platforms facing the public.
Harmonizing Digital Governance
The framework, approved by NITDA Director-General Kashifu Inuwa Abdullahi under the NITDA Act 2007, serves as a regulatory umbrella. It harmonizes three previously separate instruments: the National Software Development Guideline, the National Software Testing Guideline, and the Software Testing Organisations Licensing (STOL) Guideline. This consolidation is part of a broader strategic effort to modernize Nigeria's digital governance and mitigate the financial losses associated with frequent software failures in public sector IT projects.
Strengthening Digital Trust
By enforcing independent certification and global technical standards, Nigeria aims to bolster cybersecurity and increase overall digital trust. The move is expected to catalyze the growth of a domestic industry for licensed software testing organizations, which will be essential for the framework's execution. According to NITDA, these measures are intended to make "Made-in-Nigeria" software more competitive on a global scale and create a more stable environment to attract foreign direct investment.
"Quality is the foundation of digital trust," stated Kashifu Inuwa Abdullahi. "With this Framework, every software solution serving Nigerians—whether built for government or the private sector—will meet clear national standards for security, reliability and interoperability."
Implementation Timeline
While the framework has been unveiled, it is not yet fully in effect. NITDA has scheduled the SQA Framework to become fully operational in the second quarter of 2027. Until then, the agency will focus on the licensing of testing organizations and the preparation of government agencies to meet the new certification prerequisites.