Morocco Strengthens Cybersecurity with a Comprehensive Vision and Integrated Strategy

Over the past decade, Morocco has taken significant and promising steps to strengthen its cybersecurity, recognizing the increasing challenges posed by an interconnected digital world. Since 2012, the kingdom has adopted a comprehensive national policy aimed at protecting its digital infrastructure and securing its national cyberspace through a set of strategic, legal, and institutional measures.

Established National Strategy and Advanced Legislation

The real start of this path was marked by the adoption of the National Cybersecurity Strategy in 2012, which aims to build a cohesive system that combines good governance, legal protection, and flexible mechanisms to counter cyber-attacks. This strategy builds on earlier plans such as “Digital Morocco 2013” and “Digital Morocco 2020,” which promote digital development coupled with security.

On the legislative level, Morocco has enacted several laws including Law 09-08 of 2009 on personal data protection, Law 05-20 on cybersecurity, and Law 43-20 concerning electronic signatures, providing a solid legal framework to support national efforts. Additionally, the government recently announced the creation of a Directorate for the Governance of Information Systems Security within the Ministry of Economy and Finance to enhance coordination and standardize procedures.

Effective Institutions and Integrated National Efforts

The General Directorate for Information Systems Security (DGSSI), established in 2011, acts as the central authority responsible for coordinating and supervising all cybersecurity activities. Computer emergency response teams such as maCERT play a critical role in rapid reaction to cyber incidents and are among the first in Africa.

Morocco also operates specialized national bodies such as the National Telecommunications Regulatory Agency (ANRT) and the National Commission for the Protection of Personal Data (CNDP) to support and enforce security policies and technical capacities.

Capacity Building and International Partnerships

Morocco’s strategy has emphasized human capital development through continuous training programs in collaboration with academic institutions like Al Akhawayn University and innovative initiatives such as the Deloitte Cybersecurity Center in Casablanca, a leading hub for innovation and skill development.

The kingdom has also strengthened its international collaborations through organizations like the International Telecommunication Union (ITU), achieving notable progress in the Global Cybersecurity Index by rising to 50th place worldwide in 2021, compared to 24th place in 2015.

Challenges and Future Prospects

Despite considerable progress, Morocco still faces numerous challenges, including low public awareness about cybersecurity importance, scarcity of specialized skills, and financial constraints within small and medium enterprises. Some infrastructures suffer from outdated systems, which increases vulnerability to modern attacks such as ransomware and social engineering.

Conclusion

With the September 2025 appointment of Major General Abdullah Boutrig as Director General of DGSSI, Morocco demonstrates its firm commitment to enhancing strategic leadership in facing digital threats. This appointment marks a qualitative step in continuing to build a strong and advanced cybersecurity ecosystem that takes into account global challenges and national requirements in an era of rapid digital transformation.

Sustained investment in technological infrastructure, awareness, training, and international cooperation remains essential to achieving this vision, ensuring the protection of digital sovereignty and bolstering the kingdom’s economic and social growth in the future.

About محمد الفاسي