Nigeria's testing board supports risk-based software rules

The Nigerian Software Testing Qualifications Board (NGSTQB) has endorsed the National Information Technology Development Agency’s (NITDA) updated software testing standards while advocating for a risk-adjusted enforcement strategy. The National Software Testing Guideline, released in April 2026, requires security, performance, usability, and reliability testing for all software, whether developed, modified, integrated, or deployed in Nigeria, before launch. Compliance applies uniformly across public and private sectors, though testing intensity scales with factors like data sensitivity, public impact, and failure risks.

NGSTQB, which governs software testing standards nationwide, described the Guideline as a direct response to recurring failures in essential systems, including financial platforms, identity verification tools, and government services. Boye Dare, the Board’s president, framed poorly tested software as a tangible economic threat. “Software has become the invisible infrastructure of Nigeria’s economy, it sits behind every bank transfer, every hospital record, every government portal. When that infrastructure is not properly tested, the cost is not abstract; it is failed transactions, exposed data and public services that let people down,” he said.

The Board’s backing rests on five foundational principles: full alignment with NITDA’s goals, mandatory independent testing for high-risk applications, risk-tiered regulation instead of one-size-fits-all rules, and framing compliance as an investment in system resilience rather than a reactive obligation. NGSTQB stressed that a flaw in a low-risk portal carries far less weight than one in a national payment gateway, necessitating flexible enforcement tiers.

Certification will be handled exclusively by NITDA-licensed organizations, with major software updates subject to retesting. To support adoption, NGSTQB will lead industry training programs, public awareness initiatives, and ongoing feedback loops to NITDA for guideline refinements. Dare clarified the Board’s role: “We are not approaching this as regulators looking in from outside. We are committing to sit with industry, train the professionals who will do this testing, and take feedback back to NITDA so the Guideline works in practice, not just on paper.”

Beyond immediate compliance, NGSTQB positioned the Guideline as a cornerstone for strengthening trust in Nigeria’s digital economy. The Board argued that standardized testing would curb fraud, reduce system outages, and enhance the global competitiveness of locally built software. Past regulatory efforts often faltered due to inconsistent testing practices, particularly in high-stakes sectors where failures had severe consequences. The new framework addresses this by linking testing requirements directly to risk profiles, ensuring critical infrastructure receives appropriate scrutiny while avoiding unnecessary burdens on lower-risk projects.