Information Network Security Agency

What Information Network Security Agency does

Information Network Security Administration (INSA) is Ethiopia's federal government cybersecurity agency, established in 1999 and re-mandated in 2007 under Council of Ministers Regulation No. 130/2007. Headquartered in Addis Ababa with a workforce of 1,001–5,000, INSA operates as the sole statutory authority for protecting Ethiopia's national information infrastructure, conducting cyber audits on 410 institutions in FY2024/25, running a 24/7 National Cybersecurity Operations Center (EthioCERT), and delivering digital forensics and fraud prevention services that handled over 6,000 cases in FY2024/25. The agency prevents 97–99% of recorded cyberattacks on Ethiopian infrastructure and has driven Ethiopia's Global Cybersecurity Index from 34% to Tier 3 status.

INSA builds and operates an indigenous cybersecurity and digital government technology stack including nine proprietary products (Gasha Anti-Virus, Gasha VPN, Gasha WAF, Enyuma IAM, Sirkuni, Derash, Erga, Debo, Niser SIM), the national Public Key Infrastructure and Country Signing Certificate Authority securing Fayda Digital ID and e-passports, and citizen-facing platforms such as the Darash electronic tax payment system integrated with 22 banks, an Electronic Invoice Management System for the Ministry of Revenues, and a Construction Regulation Information System. These technologies underpin Ethiopia's digital sovereignty agenda and are deployed across federal ministries, the Federal Police, defense institutions, and state-owned enterprises.

The agency's business model is government budget allocation rather than commercial revenue, supplemented by transaction fees on security clearances for imported technology (5,037 items processed in FY2024/25). Distribution occurs through regulatory mandates, institutional partnerships, and public awareness programs including National Cybersecurity Month and university cyber clubs. Strategic positioning is anchored by the June 2026 Critical Infrastructure Proclamation, which expanded INSA's enforcement authority over private-sector critical infrastructure operators and reinforced its monopoly on national cyber regulation.

Name

Information Network Security Agency

Legal name

Information Network Security Administration

Website

https://insa.gov.et

Company type

Private

Founded year

1999

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

INSA is Ethiopia's federal cybersecurity agency, operating a 24/7 national SOC, digital forensics lab, and indigenous security product portfolio (Gasha, Enyuma, Darash) to protect government, critical infrastructure, and citizens under a statutory mandate.

Ownership category

akta.pro rank

Headquarters

HQ city

Addis Ababa

HQ country

Ethiopia

HQ region

Africa

Offices1 record

Markets served

Offering type

Services

Revenue model

1. Government Budget Allocation: INSA is funded through annual government budget allocations as Ethiopia's national cybersecurity agency. No commercial revenue generation.
2. Security Clearance Fees: Processing fees for security clearances on imported technology products - 5,037 technology items processed in 2024/25 fiscal year with 4,925 approved and 112 rejected

Go-to-market motion1 record

Distribution channels5 records

Marketing channels8 records

Core offering

No source content was provided describing the company's actual products or services. Based solely on the company name, it appears positioned around information and network security services, but the input contains no evidentiary detail.

Product overview

INSA offers a broad cybersecurity and digital transformation portfolio consisting of indigenous security products (Gasha Anti-Virus, Gasha VPN, Gasha WAF, Enyuma IAM, Sirkuni, Derash, Niser SIM), government-facing digital platforms (Darash e-payment, Electronic Invoice Management, Construction Regulation Information System, National PKI/Root Certificate Authority, Digital Certificate Service for Fayda Digital ID, 3D City Mapping), and services (Digital Forensic Investigation, Ethio Cyber Emergency Response Team, Cloud Seeding, Cyber Security Audits, Fraud Prevention, Security Clearance for imported technology). These products collectively protect Ethiopia's digital sovereignty across government institutions, critical infrastructure, and citizens.

Differentiator

Problem solved

Functional benefit

Quantifiable outcome

• Prevented 13,494 cyberattacks and conducted audits on 410 institutions in 2024/25 fiscal year
• +4 more outcomes

Named customers10 records

Segments5 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature14 records

Partnerships

18 partnerships are on record, tiered core and minor.

• Ethiopian Air ForcecoreStrategic or Co-development Partner · 10 June 2026MoU signed for establishing a Drone Technology Center as an international hub for research, innovation, and development in Unmanned Aerial Systems (UAS). Collaboration includes aerospace and defense technology modernization, infrastructure and laboratory linkages, and human resource capacity building in drone and aerospace technologies.
• Council for Scientific and Industrial Research (CSIR) - South AfricaminorStrategic or Co-development Partner · 4 March 2026Discussions on potential collaboration in cybersecurity and technology development. Strategic cooperation would advance regional cybersecurity and technological development between Ethiopia and South Africa.
• V-Tech SolutionscoreStrategic or Co-development Partner · 1 March 2026Public-Private Partnership (PPP) for joint efforts in capacity building, innovation, and technology commercialization. Agreement formalizes collaboration between government and private sectors to strengthen Ethiopia's cybersecurity and advance Digital Ethiopia 2030 agenda.
• Italian Med-Or Foundation and National Cyber Security AgencyminorStrategic or Co-development Partner · 26 January 2026Joint 'Cyber Bridge' forum strengthening Africa's capacity to withstand cyber threats through technical expertise, policy capacity, specialized training, diplomacy, and cyber governance.
• National ID ProgramcoreStrategic or Co-development Partner · 9 December 2025Launch of National Country Sign Certificate Authority (National CSCA) providing digital certificates for security of Fayda digital ID system, ensuring accurate, verifiable, and legally recognized digital identities.
• Ethiopian Construction AuthoritycoreStrategic or Co-development Partner · 7 October 2025Launch of Construction Regulation Information System (CRIS) and Cybersecurity Management Project to improve construction oversight, transparency, and reduce corruption in the construction industry.
• INTERPOLcoreStrategic or Co-development Partner · 19 August 2025Enhancing cooperation to combat cross-border cybercrime, strengthening information sharing, and boosting digital forensics and investigative capabilities.
• Ethiopian Federal PolicecoreStrategic or Co-development Partner · 1 August 2025Transition of Federal Police operations into digital era through indigenous technologies including Human Resource Management System, Employee Self-Service Portal, Secure ID Card Printing System, and Modern Document Management System. Elevated to strategic partnership level.
• Ahadu Bank and Geda BankcoreStrategic or Co-development Partner · 1 July 2025Tripartite agreement with Ministry of Revenue enabling taxpayers to declare and pay taxes through INSA's electronic payment platform (Darash). Banks integrated with Darash system for electronic tax collection.
• Ministry of RevenuecoreStrategic or Co-development Partner · 1 July 2025Collaboration on electronic tax collection through Darash electronic payment system, with 22 partner banks facilitating digital tax payments.
• Ministry of TourismminorStrategic or Co-development Partner · 11 February 2021Joint development of 'Visit Ethiopia' platform - a secure and user-centric mobile application for promoting national tourist attractions and enabling digital transactions in tourism sector.
• Gambella Regional State Innovation and Technology CommissionminorStrategic or Co-development PartnerCollaboration on cybersecurity awareness training for regional leaders and professionals on cybersecurity standards and implementation.
• National Bank of EthiopiacoreStrategic or Co-development PartnerPanel discussion on 'Secure Digital Finance for National Growth' addressing cybersecurity in digital finance ecosystem. National Bank aligning regulatory framework with international best practices.
• Ethio Engineering GroupcoreStrategic or Co-development PartnerDeployment of Human Resource Management System for seven subsidiary industries to transition to modern, efficient, integrated digital operations with data-driven decision-making.
• Cuban GovernmentminorStrategic or Co-development PartnerDiscussions on enhancing cooperation in cybersecurity between Ethiopia and Cuba, with focus on knowledge exchange, joint research, development, and human resource growth.
• African Union and African CountriescoreStrategic or Co-development PartnerCall for strengthening cooperation in cybersecurity across Africa, developing common frameworks, and enabling interoperability while respecting national contexts.
• Jimma UniversityminorStrategic or Co-development PartnerEstablishment of cybersecurity club at university for student talent development, following similar clubs at Haramaya University, Arba Minch University, and Addis Ababa Science and Technology University.
• Defense Command and Staff CollegeminorStrategic or Co-development PartnerEducational visits for senior officers to understand country's technological capacity-building efforts, digital sovereignty protection, and enhance coordination between security and defense institutions.

Scale indicators10 records

Recent moves8 records

Expansion highlights6 records

Direct peers

• Cybersecurity and Infrastructure Security Agency (CISA): CISA is the U.S. federal agency charged with protecting critical infrastructure from cyber threats and coordinating national cyber defense. It is the closest functional peer to INSA in scope and mandate, though at significantly larger scale and with a much bigger federal budget.
• National Cyber Security Centre (NCSC) - United Kingdom: NCSC is the UK's authority for cyber threats, providing incident response, security guidance, and critical infrastructure protection. Comparable to INSA as a government-mandated national cybersecurity authority with a 24/7 incident response function.
• ANSSI (Agence nationale de la sécurité des systèmes d'information): ANSSI is France's national cybersecurity agency responsible for defending state information systems and supporting critical infrastructure operators. Comparable to INSA in delivering government cybersecurity services, issuing security certifications, and operating a national CERT function.
• BSI (Bundesamt für Sicherheit in der Informationstechnik): BSI is Germany's federal cybersecurity authority focused on securing government networks, critical infrastructure, and citizen digital services. Comparable to INSA in serving as the national technical authority for cybersecurity standards, audits, and government IT security.
• Israel National Cyber Directorate (INCD): INCD is Israel's national cyber defense authority, responsible for defending civilian cyberspace and building national cyber resilience. Comparable to INSA in its national-mandate cyber defense role, with a strong emphasis on indigenous capability development and talent cultivation.
• National Cyber Security Centre (NCSC) - New Zealand: New Zealand's NCSC is the government lead for cyber security, providing incident response, threat intelligence, and critical infrastructure protection. Comparable to INSA as a smaller national cybersecurity authority with a full-service mandate similar in scope.

Regional players

• Kenya National Computer and Cybercrime Coordination Committee (NC4): Kenya's national CERT (KE-CIRT/CC) coordinates cybersecurity incident response across critical sectors in East Africa. A regional peer to INSA operating in a similar East African regulatory and threat environment, serving as a natural cross-border coordination counterpart.
• South African CSIR (Council for Scientific and Industrial Research): CSIR is South Africa's statutory R&D organization with cybersecurity research capabilities and a national mandate for technology development. Comparable to INSA's indigenous technology development role and already a partner of INSA for cybersecurity collaboration.
• National Information Technology Development Agency (NITDA) - Nigeria: NITDA is Nigeria's agency for IT development and regulation, including cybersecurity policy coordination. A regional African peer to INSA in driving national digital transformation and indigenous technology capacity.

Others

• EthioCERT: EthioCERT is INSA's wholly owned national computer emergency response team subsidiary, operating 24/7 incident monitoring. Listed as an OTHERS peer to capture the operational CERT ecosystem relationship, but in practice it is part of the INSA group.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/insaethio
• Facebookfacebook.com/INSA.ETHIOPIA
• LinkedInlinkedin.com/company/information-network-security-agency

Revenue estimate

Valuation estimate

Number of profiles

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Information Network Security Agency