Ghana CSA Incident Reporting + National CERT-GH (Part IV of Act 1038). 24-HOUR INCIDENT REPORTING REQUIREMENT (Sec.41): CII owners must report cybersecurity incidents to CSA Ghana within 24 HOURS of incident DISCOVERY; the threshold is incidents affecting CII confidentiality + integrity + availability + with significant risk of harm to public safety + national security + economic stability + public health + critical operations. INITIAL REPORT contents: incident type + scope + affected systems + initial impact assessment + immediate response actions; FOLLOW-UP REPORTS at significant milestones + final report within 30 days of incident closure including root cause + remediation + lessons learned. INCIDENT TYPES requiring reporting: ransomware + data breach + DDoS + unauthorized access + malicious code + insider threats + supply chain compromise + nation-state activity + critical-infrastructure-impact incidents. NATIONAL CERT-GH (Sec.42): the operational arm under CSA Ghana coordinating: (a) INCIDENT RESPONSE coordination across CII sectors + cross-sector; (b) THREAT INTELLIGENCE collection + analysis + dissemination; (c) VULNERABILITY COORDINATION with research community + vendors; (d) CYBER EXERCISES national + sector + international (e.g. AU + ECOWAS exercises); (e) INTERNATIONAL CERT cooperation via FIRST + AfricaCERT + Commonwealth Cybercrime Network + OIC-CERT; (f) PUBLIC ADVISORIES + warnings. ENGAGEMENT: CII owners + cybersecurity professionals + service providers should maintain CERT-GH contact points + threat-intelligence subscriptions + incident-response coordination procedures.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.