COMPLIANCE AS A CATALYST: PROPOSING THE REGULATORYDRIVEN CYBERSECURITY ALIGNMENT (RDCA) THEORY FOR INSTITUTIONAL CYBERSECURITY GROWTH IN EMERGING ECONOMIES

In many emerging economies, regulatory compliance is often perceived as a bureaucratic necessity. This paper challenges that notion by proposing the Regulatory-Driven Cybersecurity Alignment (RDCA) Theory, which posits that compliance can be a powerful catalyst for institutional cybersecurity growth. Focusing on Nigeria’s data privacy landscape especially the Nigeria Data Protection Regulation (NDPR) the RDCA Theory illustrates how regulatory obligations serve as a trigger for cybersecurity capacity building, particularly when organizations align legal mandates with strategic IT operations. Grounded in Institutional Theory and Protection Motivation Theory, the model captures the dynamic interplay between external regulatory pressure and internal organizational response. Empirical insights from Nigerian sectors such as banking, healthcare, and education reveal that when compliance is framed as a strategic priority, it leads to stronger investment in cybersecurity infrastructure, training, and governance. However, disparities in compliance among SMEs versus large corporations highlight the need for scalable, inclusive approaches. The study concludes that in underresourced environment