"I Built an NDPA Audit Toolkit as a Cybersecurity Beginner, Here's What I Learned"

"Two months ago I started my cybersecurity journey with zero IT background. Today I shipped my first real tool: the NDPA Audit Toolkit, an interactive compliance checklist for Nigeria's Data Protection Act 2023 that generates a gap analysis report.

WHY I BUILT IT
Most Nigerian businesses don't know if they're compliant with the NDPA. Consultants charge a fortune. I wanted to build something small businesses could actually use, and learn GRC by doing.

WHAT IT DOES
• Structured audit questions across NDPA requirements
• Gap scoring per section
• Plain-language remediation suggestions
• Generates a report you can share

WHAT I LEARNED

1. You don't need a degree to build useful security tools, you need a problem and patience
2. Breaking a big framework into questions is the whole job of GRC
3. Python + CSVs + a little structure = a working tool
4. Shipping > perfecting. v1 was ugly, v1 works

NEXT
ISO 27001 gap analysis toolkit + a SOC home lab write-up with Wazuh.

Repo: github.com/okekechukwuchebem-blip

cybersecurity #GRC #python #NDPA #buildinpublic"