NITDA's software testing rules reach full effect in Q2 2027

NITDA's software testing rules reach full effect in Q2 2027

6 October 2026: Nigeria's National Information Technology Development Agency (NITDA) will require independent third-party testing and certification of software before deployment, with the rules taking full effect in the second quarter of 2027. This week the Nigerian Software Testing Qualifications Board (NGSTQB) endorsed the National Software Testing Guideline while asking for enforcement that scales with risk.

Not yet independently verified. We have not read NITDA's own guideline documents, so the classes and dates rest on press coverage. We will add the NITDA text when we can open it. We will update this when it can be confirmed, and remove this note.

The guideline is one of three in NITDA's National Software Quality Assurance Framework, published in late July and signed by Director-General Kashifu Inuwa Abdullahi. The others are a National Software Development Guideline, which Technology Times says covers secure coding to OWASP standards, standard documentation and WCAG 2.1 AA accessibility for citizen-facing services, and a licensing guideline for Licensed Software Testing Organisations, the independent certifiers NITDA will accredit.

Vanguard reports that the framework applies to federal government institutions, regulated industries and the wider digital ecosystem, and that compliance becomes a condition of IT Project Clearance. Software is sorted into three classes. Class A is high-risk critical infrastructure such as core banking switches, identity management systems and power grid controls, with the strictest standards and specialised audits. Class B covers moderate-risk enterprise platforms and Class C low-risk internal tools. Before enforcement begins NITDA plans capacity-building and an expression of interest for testing organisations seeking accreditation.

NGSTQB's statement, dated 6 October, backs the aims but argues against uniform application. “A defect in a brochure website is not the same as a defect in a payment switch or a national identity platform,” said Boye Dare, the board's president. His five-point position supports proportionate risk-based regulation, independent testing of critical systems, treating compliance as a market investment and building skills through training. Dare said NGSTQB would “sit with industry” and take feedback back to NITDA.

Suppliers selling to federal bodies should establish which class their product falls into, since that decides how much testing evidence they will need to show before the Q2 2027 deadline.

Sources

• Techeconomy: NGSTQB Throws its Weight Behind NITDA's National Software Testing Guideline, Calls for Risk-Based Enforcement, 6 October 2026
• Vanguard: NITDA unveils national software quality rules to boost cybersecurity, digital trust, 29 July 2026
• Technology Times: NITDA sets Q2 2027 deadline for mandatory government software testing (read 2026-10-06), 6 October 2026