The Government has given owners and operators of critical Information and Communication Technology (ICT) infrastructure six months to register their systems under a new initiative aimed at strengthening the security and continuity of essential digital services.
The registration exercise, which began on June 19, 2026, will close on December 19, 2026, according to Minister for Communication and Information Technology Anjela Kairuki.
The exercise is being implemented under the Cybercrimes Act No. 14 of 2015 and Government Notice No. 147 issued on June 19, 2026.
Speaking to editors and journalists, Ms Kairuki said the Government had identified critical ICT infrastructure across public and private sectors in Mainland Tanzania and Zanzibar that requires registration and protection.
She said the infrastructure covers assets, equipment, computer systems and networks whose failure or disruption could have serious consequences for national security, the economy and the delivery of essential services.
“Establishing registration for critical ICT infrastructure is an important step towards strengthening the security, protection and continuity of essential digital services in the country,” Ms Kairuki said.
The sectors covered include telecommunications and information services, finance and banking, water, health, energy, mining, transport, food and agriculture, construction, the blue economy, environment, manufacturing, defence, aviation and education.
Others are civil administration, civil protection, land, public safety and security.
Ms Kairuki said the objective was to ensure that critical systems remain secure, available and operational even when faced with cyberattacks, technical failures or disasters.
The initiative comes as Tanzania expands its use of digital systems in public services, financial transactions, communication and other areas of the economy, increasing the need to protect systems that citizens and businesses depend on.
The Government has prepared five guidelines to help owners and operators identify, manage and protect critical ICT infrastructure.
They cover identification and management of critical ICT infrastructure, infrastructure audits, risk assessment, data integrity and authenticity, and disaster recovery planning.
Owners and operators have been directed to create accounts through the CII Portal before submitting details of their infrastructure.
Ms Kairuki also urged stakeholders facing challenges during registration or dealing with security-related issues to seek assistance from technical experts at the Ministry.
Support is available through 0612 600 600, 0612 400 400 and 0733 124 972, while inquiries can also be submitted through supportcii-registry@mawasiliano.go.tz and the CII Portal.
The minister said owners and operators must report security incidents involving critical ICT infrastructure to the relevant authorities within 24 hours of discovering them.
The reports should provide details of the incident, its actual or potential impact, services affected or likely to be affected, and the initial measures taken to contain the situation.
Ms Kairuki said timely reporting would enable authorities to respond quickly and reduce the potential impact of cyber incidents on essential services.
The Government has also warned that individuals who deliberately damage critical ICT infrastructure will face severe legal consequences.
Ms Kairuki said Section 29 of the Cybercrimes Act, 2015 provides for a fine of at least TSh100 million or three times the value of the loss caused, imprisonment of not less than five years, or both.
She said the penalties reflected the potential impact that damage to critical ICT systems could have on national security, economic activities and society.
Ms Kairuki urged institutions, companies and other operators covered by the initiative to submit accurate information within the stipulated period and comply with the relevant laws, regulations and guidelines.
She said effective protection of critical ICT infrastructure would require cooperation between the Government, private sector and other stakeholders.
The registration exercise is expected to give authorities a clearer picture of the digital systems considered essential to the country and strengthen preparedness against cyberattacks, technical failures and other disruptions.
