The Eswatini Communications Commission (ESCCOM) has been designated as the country's national cybersecurity agency, mandated to regulate, coordinate, and build capacity in cybersecurity. This designation is under the Computer Crime and Cybercrime Act of 2022. ESCCOM's role involves regulating cybersecurity, coordinating the national cybersecurity strategy, and enforcing security standards. The commission works closely with the ministry of ICT, law enforcement agencies, and the Judiciary on cybersecurity investigations and responses.
ESCCOM's incident response function is critical in detecting and receiving reports of cybersecurity incidents, analyzing them, and coordinating responses. With mobile broadband penetration standing at 134% in 2025, the country's growing reliance on digital technology makes cybersecurity increasingly important. This high penetration rate, exceeding 100% due to some individuals having more than one mobile device, underscores the need for robust cybersecurity measures.
The importance of protecting critical infrastructure was also highlighted by ESCCOM Assistant Director for Cybersecurity Nokuthula Hlophe. Although critical information infrastructure has not yet been officially declared in the country, Hlophe used examples of cyber incidents in other countries to demonstrate how attacks on systems controlling essential services like electricity and water could affect communities. She cited an example of an individual remotely accessing a system controlling the pH level of water, which could lead to harmful changes in the water supply.
ESCCOM works with infrastructure owners and service providers to ensure essential services and applications remain secure. The commission also collaborates with civil society and universities on cybersecurity awareness and capacity building. This multi-faceted approach aims to build cyber resilience and protect the country's digital infrastructure.
ESCCOM can assist with online harassment cases, including those involving individuals using pseudonyms to harass others online. The commission has established relationships with social media platforms and can request the removal of harmful content. For instance, ESCCOM has a point of contact with TikTok and can request the platform to take down content in appropriate cases.
While ESCCOM does not have the authority to arrest perpetrators, it works closely with law enforcement agencies to investigate and respond to cyber-related incidents. In cases involving individuals using pseudonyms or living outside the country, investigations can be more complicated but are not impossible. ESCCOM has previously dealt with a case involving a child who bullied another child online, and the perpetrator was eventually traced.
The commission's efforts to combat cybercrime involve cooperation with other jurisdictions, and INTERPOL can become involved where necessary. The process depends on cooperation and agreements between the relevant police authorities. Overall, ESCCOM's role in regulating and coordinating cybersecurity efforts is crucial in protecting the country's digital infrastructure and building cyber resilience.
Key points
- ESCCOM's mandate under the Computer Crime and Cybercrime Act of 2022 includes regulating cybersecurity, coordinating the national cybersecurity strategy, and enforcing security standards.
