NIMC obtains information security standard | Nairalaw

The National Identity Management Commission has obtained the
global standards for Information Security Management System as part
of its determination to ensure the security of data and information
of citizens.

The Director-General, NIMC, Aliyu Aziz, who made this known in a
statement in Abuja, said this was in line with the Commission’s
commitment to the security of information and data security.

He said the move was to ensure adequate security of data
collected from citizens and legal residents as the commission
geared up to attain 100 per cent enrolment through the National
Identification Number.

“We obtained the ISO/IEC 27001:2013, which is a global
information security standard that formally specifies an
Information Security Management System to safeguard the data and
information obtained from citizens and legal residents in line with
global best practices,” he said.

He said the ISMS “prescribes a set of best practices that
include documentation requirements, divisions of responsibility,
availability, access control, security, auditing and corrective as
well as preventive measures.”

According to Aziz, in this era of rising cyber-attacks, national
institutions such as NIMC that hold national data are taking
several security precautions to keep their information vault
safe.

The statement reiterated that NIMC was one of the few
government-owned agencies certified under the Mastercard Global
Vendor Certification Programme in Africa.

According to the commission, one of the applets on the national
e-ID card is the payment applet which requires NIMC to obtain the
Mastercard certification.