Overseeing state affairs from abroad demands more than basic digital tools. When the task involves the President of the Republic, every document, instruction, or administrative decision must be handled through systems that guarantee confidentiality, authenticity, and full traceability. The debate intensified after a recent statement from Cameroon’s Minister of Higher Education, Jacques Fame Ndongo, who confirmed that President Paul Biya continues to oversee national matters, whether in person or via electronic means.

This raises a critical question: what secure digital tools should a modern presidential administration use when the head of state is outside national borders? The mere publication of a decree on social media or the official presidency website only represents the final step in public communication. It reveals nothing about how the document was prepared, transmitted, reviewed, signed, filed, or preserved.

institutional email addresses under the @prc.cm domain

At the core of secure remote governance lies the use of official email addresses linked to the Presidency’s domain. Every collaborator, including the Secretary General, civil cabinet members, and advisors, must have a designated institutional address such as [email protected], rather than relying on personal accounts like Gmail or Yahoo.

Personal email services, though widely used, pose serious governance risks. The state cannot control their creation, access points, message retention, or deactivation after staff departures. An institutional domain, by contrast, enables:

• centralized account creation and revocation for staff;
• mandatory strong authentication;
• secure storage of official exchanges;
• detection of suspicious login attempts;
• prevention of automatic forwarding to personal inboxes;
• consistent security and archiving policies.

Such a system should incorporate SPF, DKIM, and DMARC protocols to prevent identity theft and phishing, along with encrypted server-to-server communication. Even with a secure institutional address, sensitive documents should not be sent as email attachments. Instead, notifications should direct recipients to a secure presidential platform where the actual file resides.

a dedicated presidential document management platform

A specialized electronic document management system (EDMS) is essential for handling state affairs remotely. Each dossier should be uniquely referenced and include:

• a unique identifier;
• the author’s identity;
• confidentiality level;
• authorized viewers;
• version history;
• comments and approvals;
• validation timestamp;
• complete access logs.

This allows the President to review documents on a secure terminal, add notes, request changes, or approve proposals without files being copied across devices or sent via personal channels. For highly sensitive files, the platform should block local downloads, printing, text copying, or unauthorized transfers.

It should also log every access: who viewed the document, when, from which device, and what modifications were made—ensuring full transparency in decision-making.

electronic signatures that meet presidential standards

A scanned image of a signature is not sufficient for validating decrees or decisions remotely. A robust electronic signature should be based on digital certificates that confirm:

• the signer’s identity;
• document integrity;
• signature timestamp;
• freedom from post-signature alteration.

The cryptographic key used for high-level decisions must be stored in a tamper-proof hardware module—never on a regular computer, USB drive, or personal phone. Access to this key should require direct presidential authentication and generate a time-stamped audit trail.

For major decisions, the process could involve multiple layers: presidential approval, technical signature verification, legal review, official registration, and public release.

zero trust architecture for remote access

A virtual private network (VPN) alone cannot secure remote connections to presidential systems. A Zero Trust approach assumes no user, device, or network is inherently trustworthy. Every access request must be validated against multiple factors:

• user identity;
• device used;
• location of connection;
• document sensitivity level;
• user access rights;
• behavioral patterns during login.

Accessing a presidential dossier could require, simultaneously: an institutional computer, a digital certificate, an encrypted connection, a physical security key, and a local biometric scan on the device.

government-issued devices only

No presidential business should be conducted on personal phones or computers. Cabinet members, the Secretary General, and relevant advisors must use institutional devices administered by a dedicated IT team. These devices must be:

• fully encrypted;
• regularly updated;
• limited to approved applications;
• segregated from personal use;
• remotely wipeable in case of loss;
• automatically locked after inactivity;
• blocked from connecting to unsecured public Wi-Fi.

A centralized device management system allows administrators to push updates, block dangerous apps, revoke devices, and remotely erase data in the event of theft or compromise.

phishing-resistant authentication

Passwords, even complex ones, are no longer enough. Authentication should combine several elements:

• an institutional device;
• a personal PIN;
• a physical security key;
• potentially a local biometric check.

SMS codes can enhance security but remain vulnerable. For the most sensitive accounts, hardware keys and digital certificates offer stronger protection against phishing. Staff should also be regularly trained to spot fraudulent messages, urgent scams, malicious links, and impersonation attempts.

WhatsApp: useful for alerts, not for documents

While WhatsApp is widely used in Cameroon—including in government circles—its end-to-end encryption does not make it an official document exchange platform. A file sent via WhatsApp remains at risk if:

• the phone is lost or compromised;
• a screenshot is taken;
• it is forwarded without authorization;
• it is stored in insecure backups;
• it remains on a former employee’s device.

WhatsApp lacks mechanisms for document classification, access management, version control, electronic signing, or administrative archiving. It can, however, be used to alert a colleague that a secure file is ready for review—without attaching the document itself. For example: “Dossier PRC/SG/2026/125 is available in your secure workspace for review.”

In short: use WhatsApp to coordinate and alert; use the secure presidential platform to transmit, review, decide, sign, and archive.

secure government videoconferencing

Remote meetings between the President and advisors should occur on a dedicated, secure videoconferencing platform that ensures:

• end-to-end encryption;
• participant identification;
• strict invitation controls;
• prohibition of unauthorized recordings;
• retention of connection logs;
• use of institutional devices only;
• data hosting under national control.

Public links, free accounts, and unvetted apps must never be used for discussions involving defense, diplomacy, appointments, or government arbitration.

classifying documents by sensitivity

Not all presidential documents carry the same risk. A classification policy could include four levels:

• Public: intended for public release;
• Internal: for government use only;
• Confidential: unauthorized disclosure could harm public action;
• Highly Sensitive: defense, intelligence, diplomacy, strategic appointments, or major arbitrations.

Each level determines the allowed transmission channel, authorized users, permissible devices, printing rights, retention periods, and archiving methods. A public document might be sent via institutional email, while a highly sensitive file should only be accessible through a tightly controlled platform.

comprehensive audit trails for every decision

Every consultation, modification, validation, or transmission must be automatically logged. The security journal should detail:

• who accessed the document;
• when they accessed it;
• from which device;
• what changes were made;
• who approved the final version;
• when it was filed and published, and by whom.

A security operations center can detect unusual logins, bulk downloads, access from unrecognized devices, or unauthorized changes to official acts. This traceability also helps reconstruct events in case of leaks, intrusions, or disputes over authenticity.

never confuse official decisions with social media posts

Presidential Facebook or X pages are tools for public communication—not for preparing or validating decisions. Before a decree appears online, it must have followed a secure path:

• transmitted through an authorized channel;
• authenticated by the competent authority;
• verified as unaltered;
• timestamped upon validation;
• preserved in official archives.

A visible signature on an image is not sufficient proof. The integrity of the decision lies in the entire secure process behind its publication.

ten priority actions for the presidency

The Presidency should implement these ten measures immediately:

1. Mandate institutional email under @prc.cm;
2. Ban personal Gmail, Yahoo, and similar accounts for state business;
3. Deploy a secure presidential document management platform;
4. Introduce a secure institutional electronic signature system;
5. Provide exclusively institutional phones and computers;
6. Enforce multi-factor authentication resistant to phishing;
7. Reserve WhatsApp for alerts and coordination only;
8. Classify documents by sensitivity level;
9. Centralize access logs in a security operations center;
10. Train staff regularly on espionage, phishing, and information leaks.

While no public evidence confirms Cameroon’s Presidency currently uses all these measures, they represent the minimum standards required for a head of state to govern securely from abroad—ensuring that every decision is authentic, traceable, and protected against manipulation.