A lot of the action towards cybersecurity in Nigeria is compliance-driven, and you find that organisations that are not compelled to do so almost never bother with cybersecurity. Most organisations do not have a budget for cybersecurity: no personnel, processes or technology in place to protect the data they're collecting.