NITDA Launches National Software Quality Framework to Strengthen Cybersecurity, Digital Services

The National Information Technology Development Agency (NITDA) has launched the National Software Quality Assurance (SQA) Framework aimed at improving the quality, security and reliability of software used across Nigeria’s public and private sectors.

According to a press release issued by the agency, the framework establishes nationwide standards for how software is designed, tested and deployed across Federal Government institutions, regulated industries and the wider digital ecosystem.

Signed by the Director-General and Chief Executive Officer of NITDA, Kashifu Inuwa Abdullahi, under the authority of the NITDA Act 2007, the framework seeks to eliminate costly IT failures, strengthen cybersecurity and build public trust in digital governance.

The framework consists of three key regulatory instruments: the National Software Development Guideline, the National Software Testing Guideline and the Software Testing Organisations Licensing (STOL) Guideline.

NITDA said the National Software Development Guideline mandates structured software development processes, adoption of OWASP secure coding practices, standardised documentation and compliance with WCAG 2.1 AA accessibility standards for citizen-facing digital services.

The National Software Testing Guideline introduces pre-deployment testing requirements covering software functionality, cybersecurity, system performance under peak demand and interoperability.

Under the STOL Guideline, independent third-party Licensed Software Testing Organisations (LSTOs) will be accredited to evaluate and certify software before deployment.

The agency explained that government software projects will now be required to undergo independent third-party testing and obtain official certification before going live, making compliance a mandatory condition for securing IT Project Clearance.

To address varying levels of digital risk, NITDA also introduced a classification system that groups software into Class A for high-risk critical infrastructure, Class B for moderate-risk enterprise platforms and Class C for low-risk internal tools.

It noted that critical Class A platforms, including core banking switches, identity management systems and power grid control systems, will be subject to stricter security standards, advanced penetration testing and specialised audit oversight by accredited testing organisations.

NITDA said the framework would deliver three major benefits, including more reliable and secure digital services for citizens and public agencies, the creation of a regulated software testing industry to support indigenous technology companies and skilled employment, and increased global confidence in Made-in-Nigeria software.

The Director-General said quality is the foundation of digital trust, adding that the framework would ensure software solutions serving Nigerians meet national standards for security, reliability and interoperability.

He noted that the initiative would modernise government technology and position Nigerian software to compete in international markets.

According to the agency, the Software Quality Assurance Framework will take full effect in the second quarter of 2027.

Before then, NITDA plans to conduct nationwide stakeholder engagement sessions, capacity-building programmes and begin the accreditation process for software testing organisations.

The agency also disclosed that an Expression of Interest (EOI) will soon be issued to organisations seeking licences as Software Testing Organisations, giving technology firms the opportunity to align their technical capacity with the new national framework.