The Cyber Security Authority (CSA) in Ghana has fined Ernst & Young (EY) Ghana GH¢360,000 for offering cybersecurity services without the necessary license. Despite prior directives from the CSA, EY Ghana continued to provide regulated cybersecurity services, including support for owners of Critical Information Infrastructure (CII). The CSA initially instructed EY Ghana on March 20, 2026, to apply for a Cybersecurity Service Provider (CSP) license within a 15-day period. This penalty underscores the CSA’s commitment to enforcing cybersecurity regulations within the country. The Authority aims to ensure all providers of such services operate legally and responsibly. The administrative penalty was officially imposed on August 18, 2026, highlighting the CSA’s proactive approach to compliance. This case serves as a warning to other organizations operating in the cybersecurity sector in Ghana.