Office of the Registrar of Companies fined GH¢240k for engaging unlicensed cybersecurity provider

The Authority has therefore directed designated Critical Information Infrastructure institutions, public-sector organisations and other entities covered by the Cybersecurity Act to verify both the licensing status and appropriate licence tier of cybersecurity service providers before awarding contracts or allowing them to commence work.

In a statement, the CSA said the ORC engaged Purpleline Solutions Limited, which was not licensed by the Authority to provide cybersecurity services, despite being specifically directed to engage a Tier 1 licensed CSP.

The Authority said the ORC was fined 10,000 penalty units for each of the two instances of non-compliance, amounting to GH¢240,000, and directed to comply with the outstanding directives within one month of receiving the sanction letter.