The Cyber Security Authority (CSA) has imposed a GH¢360,000 administrative penalty on Ernst & Young (EY) Ghana for providing regulated cybersecurity services without a valid licence.
According to the CSA, EY Ghana continued providing the services despite three directives requiring the company to obtain a Cybersecurity Service Provider (CSP) licence.
The Authority said the company was fined 10,000 penalty units, equivalent to GH¢120,000, for each of the three instances of non-compliance.
The CSA has also ordered EY Ghana to immediately cease providing regulated cybersecurity services, including Governance, Risk and Compliance (GRC) services, until it obtains the required licence.
EY Ghana has been given 14 calendar days to pay the GH¢360,000 penalty and must confirm to the CSA that the affected services have been discontinued.
The Authority has warned other unlicensed cybersecurity providers to regularise their operations or face enforcement action.
