PenCom Enhances Cybersecurity for Pension Records

The National Pension Commission (PenCom) is launching a regulatory overhaul to combat cyber threats to pension records within Nigeria's multi-trillion naira pension sector. Effective January 1, 2027, PenCom mandates that all pension fund administrators and custodians implement advanced cryptographic defenses to protect data from internal and external threats.

This initiative, outlined in an official circular signed by M. Saleem, emphasizes a zero-tolerance policy for document modification.

New guidelines will ensure that once pension-related documents are electronically signed, they are automatically frozen using cryptographic hashing, which will break the security chain if tampered with. The commission aims to enhance transparency and accountability through comprehensive digital footprints of all electronic transactions.

Additionally, PenCom is tightening regulations and will release revised ICT guidelines for pension fund operations by mid-2025. Stakeholders are advised to clarify the architectural directives in preparation for the 2027 implementation.