In an era where remote governance is becoming increasingly common, the question of how a head of state can securely manage official duties from abroad is more pressing than ever. For President Paul Biya of Cameroon, this challenge involves much more than just accessing emails or documents—it requires a robust digital ecosystem capable of safeguarding state secrets, verifying identities, and ensuring the integrity of every decision made.
The debate on remote leadership was reignited after a statement by Cameroon’s Minister of Higher Education, Jacques Fame Ndongo, who affirmed that the President continues to oversee state affairs, whether in person or through “electronic means known to all.” While this addresses political concerns, it raises a critical question: what secure digital tools should a modern presidency deploy to manage sensitive documents when the head of state is outside national borders?
Publication on social media platforms like Facebook or X represents only the final step in the process. It does not reveal the full journey of a document—how it was prepared, transmitted, reviewed, signed, recorded, or preserved. So, what infrastructure is needed to ensure that every instruction, decree, or administrative act is handled with the highest level of security?
Mandatory institutional email under the @prc.cm domain
At the core of a secure presidential workflow should be an official email system tied to the Presidency’s domain. Collaborators must use institutional addresses such as [email protected] or [email protected] instead of personal accounts like Gmail or Yahoo. Personal emails lack the governance controls required for state business—they escape full administrative oversight, making them vulnerable to misuse, data leaks, or unauthorized access after a staff member departs.
A professional email system under @prc.cm would enable:
- Centralized account creation and revocation for staff;
- Implementation of strong authentication protocols;
- Secure storage of all official exchanges;
- Detection of suspicious login attempts;
- Prevention of automatic forwarding to personal inboxes;
- Unified security and archiving policies.
This system should integrate security measures like SPF, DKIM, and DMARC to prevent identity theft and phishing, alongside encrypted server communications. However, even an institutional email address should not be used to send highly sensitive documents as attachments. Instead, it should direct recipients to a secure presidential platform where the actual file resides.
A dedicated presidential document management platform
To handle state affairs remotely, the Presidency needs a specialized electronic document management system. Each file should be logged with:
- A unique reference identifier;
- The identity of the author;
- A confidentiality level classification;
- Authorized personnel access rights;
- Version history and tracked modifications;
- Comments and approvals;
- A timestamped validation date;
- A complete access log.
This platform would allow the President to review documents, add notes, request changes, or approve proposals—all within a secure environment without files being copied across multiple devices or sent via unsecured channels. For highly classified materials, the system could restrict downloading, printing, or unauthorized sharing entirely.
Verifiable electronic signature for presidential decisions
Remote approval of decrees or decisions must go beyond a scanned image of a signature. A robust electronic signature system, based on digital certificates, would verify:
- The identity of the signatory;
- The integrity of the document;
- The exact time and date of validation;
- That no changes were made post-signature.
The cryptographic key for signing the most critical documents must be stored in a highly secure hardware module—not on a regular computer, USB drive, or personal device. Each use of this key should require direct authentication by the President and generate a time-stamped audit trail. For major decisions, multiple layers of verification could be applied: presidential validation, technical signature checks, legal review, official recording, and then public release.
A Zero Trust architecture for remote access
A Virtual Private Network (VPN) can secure connections, but it should not be the sole security measure. A Zero Trust model assumes no user, device, or network is inherently trustworthy. Every access request would be evaluated based on:
- User identity;
- Device type and status;
- Geolocation of the connection;
- Document sensitivity level;
- Assigned user privileges;
- Behavioral patterns during the session.
Access to a presidential file might require a combination of an institutional device, a digital certificate, an encrypted connection, a physical security key, and a local biometric scan on the device itself.
Government-issued devices for all collaborators
No presidential documents should ever be accessed from personal phones or laptops. All staff—from the Civil Cabinet to the General Secretariat—must use institutionally owned and managed devices. These devices should be:
- Fully encrypted at all times;
- Regularly updated with security patches;
- Restricted to approved applications only;
- Segregated from personal use;
- Remotely wipeable in case of loss or theft;
- Automatically locked after a short idle period;
- Blocked from connecting to unsecured public Wi-Fi networks.
A centralized device management system would allow the administration to deploy updates, block unsafe apps, revoke devices, and remotely erase data if compromised.
Multi-factor authentication resistant to phishing
A complex password alone is insufficient for accessing presidential systems. Authentication should combine several factors:
- An institutional device;
- A personal PIN or biometric scan;
- A physical security key;
- Possibly a time-based one-time password (TOTP) sent via SMS.
Staff must also be regularly trained to recognize phishing attempts, fraudulent urgent requests, malicious links, and impersonation scams targeting senior officials.
WhatsApp: useful for alerts, not for document transmission
While WhatsApp’s end-to-end encryption protects message content in transit, it is not suitable for handling presidential documents. Risks include:
- Loss or espionage of a staff member’s phone;
- Screenshots or unauthorized forwarding;
- Weak data backup protections;
- Association with personal accounts or devices;
- Lack of document classification, versioning, or archiving tools.
WhatsApp can, however, be used to alert collaborators that a document is ready in the secure platform—for example: “The file referenced PRC/SG/2026/125 is available in your secure workspace for review.” The actual document should never be attached to the chat.
Secure government video conferencing platforms
Remote meetings between the President and advisors should occur on dedicated, government-grade video conferencing platforms offering:
- End-to-end encryption;
- Strict participant authentication;
- Controlled invitation processes;
- Prohibition of unauthorized recordings;
- Centralized logging of all sessions;
- Use of institutional devices only;
- Full data hosting sovereignty.
Public links, free accounts, and unvetted apps must never be used for sensitive discussions involving defense, diplomacy, appointments, or government arbitration.
Document classification by sensitivity level
Not all presidential documents carry the same risk. A clear classification policy is essential:
- Public: intended for public dissemination;
- Internal: internal working documents;
- Confidential: could harm public action if leaked;
- Highly Sensitive: defense, intelligence, diplomacy, strategic appointments, or major arbitration decisions.
Each level dictates transmission channels, authorized personnel, device usage, printing rights, retention periods, and archiving methods. A public document can be sent via institutional email, but a highly sensitive file must remain accessible only through a tightly controlled platform.
Comprehensive audit trails for every decision
Every interaction with a document—viewing, editing, approving, or transmitting—must be automatically logged. The security journal should include:
- Who accessed the file and when;
- Which device was used;
- What changes were made;
- Who approved the final version;
- When the document was officially recorded and published.
A dedicated security operations center could monitor for unusual activity, such as mass document downloads, access from unrecognized devices, or unauthorized modifications to official acts. This traceability is crucial for investigating leaks, breaches, or disputes over authenticity.
Distinguishing official decisions from social media posts
Presidential Facebook pages and X accounts are tools for public communication, not systems for preparing or validating decisions. A decree published online must have followed a secure, traceable process:
- Transmitted through authorized channels;
- Authenticated by competent authorities;
- Verified as unaltered in its final form;
- Validated with a time-stamped signature;
- Preserved in official archives.
A visible signature on a social media image does not constitute full digital proof. The real security lies in the entire preceding process.
Ten priority measures for the Presidency
To ensure secure remote governance, the Presidency should implement the following:
- Mandate professional email under the @prc.cm domain;
- Ban the use of personal Gmail, Yahoo, or similar accounts for state business;
- Deploy a presidential electronic document management platform;
- Introduce a secure institutional electronic signature system;
- Provide staff with exclusively institutional phones and computers;
- Enforce phishing-resistant multi-factor authentication;
- Use WhatsApp only for alerts and coordination;
- Classify documents by sensitivity level;
- Centralize access logs in a security operations center;
- Train staff regularly on cyber threats and information leaks.
While there is no public evidence that all these measures are currently in place, they represent the minimum standards a presidency must uphold when remotely handling documents that affect national finances, diplomacy, security, and state continuity. The stakes are high: ensuring that every decision is authentic, every instruction is traceable, and no act can be forged or diverted in the President’s name.
