EY Ghana Hit with GH¢360,000 Fine Over Unlicensed Cybersecurity Operations

Ernst & Young (EY) Ghana was fined GH¢360,000 by the Cyber Security Authority (CSA) for providing regulated cybersecurity services without a valid license.

Despite clear orders to adhere to national licensing regulations, the company persisted in offering these services, including work for owners of critical information infrastructure.

The CSA mandated in March 2026 that EY Ghana submit an application for a Cybersecurity Service Provider license within 15 days. The CSA imposed GH¢360,000 in administrative penalties under the Cybersecurity Act of 2020 after the company disregarded three different regulatory directions.

Also read: Why Your Stolen Password Will Not Allow You to Access the Internet

The penalty must be paid by EY Ghana within 14 calendar days. The company must also immediately cease offering any unlicensed cybersecurity services, such as governance, risk, and compliance solutions, and while completing its application, certify this cessation in writing.

The CSA stressed that submitting an application does not grant a business authorization to conduct business. It cautioned that regardless of an organization's size, standing, or clientele, it is always subject to the law.

The Authority intends to keep a careful eye on compliance going forward and pursue legal action against unregistered providers as well as the client companies who employ them.

Source: www.metrotvonline.com