The National Information Technology Development Agency (NITDA) has launched a National Software Quality Assurance (SQA) Framework that will require all Federal Government software projects to undergo independent third party testing and certification before deployment.
The framework, unveiled on Tuesday, is aimed at reducing costly IT failures, strengthening cybersecurity and improving public trust in digital government services by setting national standards for software development, testing and deployment.
Signed by NITDA Director General Kashifu Inuwa Abdullahi under the powers of the NITDA Act 2007, the framework will become a mandatory requirement for obtaining IT Project Clearance for government software projects from the second quarter of 2027.
New standards for software development
According to NITDA, the framework combines three regulatory instruments into a single national standard.
These include the National Software Development Guideline, which requires structured software development lifecycles, secure coding practices based on Open Web Application Security Project (OWASP) standards, standardised documentation and compliance with WCAG 2.1 AA accessibility standards for citizen facing digital services.
The framework also introduces a National Software Testing Guideline that establishes benchmarks for functionality, cybersecurity, system performance under peak loads and interoperability before any software is deployed.
In addition, the Software Testing Organisations Licensing (STOL) Guideline creates a regulated system for licensing independent software testing organisations that will evaluate and certify software before it goes live.
Under the framework, government software projects must receive certification from accredited third party testing organisations before deployment.
Risk-based classification
NITDA said the framework introduces a tiered classification model that applies different levels of scrutiny based on the risk profile of software systems.
Software will be categorised into three classes, Class A for high risk and critical infrastructure systems, Class B for moderate risk enterprise platforms and Class C for lower risk internal applications.
According to the agency, critical systems such as core banking switches, national identity management platforms and electricity grid control systems will be subject to the highest security standards, including extensive penetration testing and specialised security audits conducted by top-tier accredited testing organisations.
The approach, NITDA said, recognises that not all software systems pose the same level of operational or cybersecurity risk.
Boost for local software industry
Beyond improving software quality, NITDA said the framework is expected to create a regulated market for independent software testing services, opening opportunities for indigenous technology companies and software engineers.
The agency said the initiative would encourage local firms to obtain international certifications, create high-skilled technology jobs and strengthen Nigeria's software ecosystem.
It also believes the framework will improve confidence in Nigerian-developed software, enabling local technology firms to compete more effectively in international markets while attracting foreign direct investment.
"Quality is the foundation of digital trust. With this Framework, every software solution serving Nigerians, whether built for government or the private sector, will meet clear national standards for security, reliability, and interoperability," NITDA Director General Kashifu Inuwa Abdullahi said.
"This is how we modernise government technology and position Nigerian software to compete on the global stage."
Rollout begins ahead of 2027 enforcement
Although the framework takes full effect in the second quarter of 2027, NITDA said implementation activities will begin immediately.
The agency plans to embark on nationwide stakeholder engagement and capacity building programmes while commencing the accreditation process for Licensed Software Testing Organisations (LSTOs).
NITDA also announced that it will soon issue an Expression of Interest (EOI) inviting software testing organisations seeking licences under the new regulatory framework, giving technology firms time to prepare for compliance before enforcement begins.
Add Comment