‘Leapfrogging’ or ‘lagging’?: highlighting critical information infrastructure protection challenges and opportunities in Egypt and Nigeria

Emerging economies are experiencing dramatic rises in internet penetration, along with an expansion of cyber-dependent critical infrastructure. Nevertheless, in many countries and regions, critical information infrastructure protection (CIIP) efforts remain at a relatively nascent stage. Early and widespread approaches to critical information infrastructure protection are informed by higher income, early digitising nations, which may not reflect the priorities, needs, or challenges faced by late-digitising emerging economies. This paper analyses CIIP efforts and processes in Nigeria and Egypt, considering the degree to which the standards and approaches to CIIP adopted by early digitising countries apply to each county’s experience. Evidence from both countries suggests that emerging economies will not follow the same trajectory or benefit from the same lessons learned in CIIP as early digitising regions of the world. Both countries face a different mix of CII and CII-vulnerabilities, a greater emphasis on internal cyberthreats, and significant resource and capacity constraints in comparison to early digitising nations. This suggests that ‘leap-frogging’ may not always be possible, and innovative, context-specific CIIP policies and strategies are needed.