Cybershield launches Africa’s first quantitative critical infrastructure cyber risk index

By:  Nana Appiah Acquaye

Cybershield Consulting Company Ltd has launched what it describes as Africa’s first quantitative cyber risk intelligence index for critical information infrastructure, introducing a new framework for assessing cyber risk across essential national systems.

The index, named the PHAROS INDEX, covers 127 entities across eight critical information infrastructure sectors in Ghana, including energy, finance, telecommunications, water, and health. It was developed in collaboration with Ghana’s Cyber Security Authority under the Cybersecurity Act 2020 (Act 1038).

According to Cybershield, the PHAROS INDEX represents a shift from traditional qualitative cyber maturity models toward a quantitative, data-driven approach designed to reflect operational realities in West African environments. The company says the methodology incorporates field-level assessments, including evaluations conducted in locations with limited or no connectivity, unstable power supply, and restricted communications infrastructure.

The PHAROS INDEX is built on a proprietary framework validated through the NATO Admiralty System, which is widely used for assessing intelligence reliability and credibility. Cybershield says the system enables structured, measurable risk scoring across critical infrastructure assets, allowing for more precise benchmarking and monitoring.

Speaking at the launch, Cybershield CEO and Founder Abdallah Toutoungi said the development was driven by the absence of comparable tools on the continent. He noted that the assessment approach requires direct field engagement with operational technology environments such as SCADA-controlled systems in sectors like energy and mining, rather than relying solely on questionnaire-based evaluations.

The company confirmed that the index was submitted to the Cyber Security Authority prior to its public release, in line with regulatory requirements under Ghana’s cybersecurity framework. It is now publicly accessible through the PHAROS INDEX platform.

Cybershield describes PHAROS, which stands for Pan-African Hub for Assessing Risk in Operational Systems, as a live and continuously updated index that will be reviewed on a quarterly basis. The company says it aims to expand the framework beyond Ghana as part of a broader regional cybersecurity initiative across West and Central Africa.

Cybershield Consulting Company Ltd is a Ghana-based cybersecurity firm specialising in operational technology and industrial control systems security. The company says it is currently pursuing regional expansion across ECOWAS member states and parts of Central and East Africa, focusing on strengthening cybersecurity resilience for critical infrastructure operators.