Managing state affairs from abroad—reviewing files, coordinating with teams, issuing directives—has become technically feasible. Yet when the task involves the President of the Republic, relying on standard digital tools is not enough. The systems in place must guarantee the confidentiality of information, authenticate the leader’s identity, ensure document integrity, and track every instruction from origin to execution.

The debate over remote governance resurfaced after a statement by Cameroon’s Minister of State for Higher Education, Professor Jacques Fame Ndongo. In response to concerns about a potential leadership gap, he emphasized that President Paul Biya continues to oversee operations and issue directives—whether in person or through known electronic channels. This raises a critical question: what secure digital infrastructure should a modern presidential office deploy to receive, process, approve, and archive sensitive documents when the head of state is abroad?

Posting a decree on Facebook, X, or the official presidency website is merely the final step in public communication. It reveals nothing about how the document was drafted, transmitted, reviewed, signed, filed, or preserved.

Mandatory institutional email under the @prc.cm domain

The first line of defense is the exclusive use of official email addresses tied to the Presidency’s domain. Every advisor and civil servant involved in state matters should have a personalized address—such as [email protected]—alongside functional inboxes for the General Secretariat, Civil Cabinet, and other departments. Primary use should be reserved for dedicated accounts like [email protected].

Personal accounts (Gmail, Yahoo, etc.) must be off-limits for transmitting draft decrees, confidential memos, appointment files, diplomatic correspondence, or state directives. The issue isn’t just about the security features of these platforms—it’s about control. The state cannot fully manage the creation, access, storage, or deactivation of personal accounts, nor can it prevent unauthorized data transfers or recover messages after a staff member leaves office.

A professional email system under @prc.cm would enable authorities to:

• Create and revoke employee accounts as needed;
• Enforce multi-factor authentication;
• Archive official exchanges systematically;
• Detect suspicious login attempts;
• Block automatic forwarding to personal inboxes;
• Apply unified security and retention policies.

To prevent identity theft and phishing, the system should integrate SPF, DKIM, and DMARC protocols and encrypt server-to-server communications. Even with a secure institutional address, highly sensitive documents should never be sent as attachments. Instead, notifications should direct recipients to retrieve files from a secure presidential platform.

A dedicated presidential document management platform

The Presidency needs a specialized electronic document management system for state affairs. Each file should be logged with:

• A unique reference number;
• The author’s identity;
• A confidentiality classification (public, internal, confidential, or highly sensitive);
• Access permissions for authorized personnel;
• Version history and tracking of edits;
• Comments, approvals, and timestamps;
• A full audit trail of all interactions.

This allows the President to review a document from a secure terminal, add notes, request revisions, or grant approval without files being copied across devices or sent to personal mailboxes. For the most sensitive materials, the platform should block local downloads, printing, text copying, and unauthorized transfers. It should also log every access attempt—who viewed the document, when, from which device, and what changes were made.

Tamper-proof electronic signatures for presidential decrees

Remote validation of decrees or decisions must go beyond inserting a scanned image of the President’s signature. An electronic signature based on digital certificates ensures:

• The signatory’s identity is verified;
• The document’s integrity is intact;
• The exact time of validation is recorded;
• No alterations occur after signing.

The cryptographic key used for critical documents must be stored in a hardware security module—not on a regular computer, USB drive, or personal device. Accessing this key should require direct authentication from the President and generate a time-stamped audit entry. For major decisions, the process could include multiple layers: presidential approval, technical signature verification, legal review, official registration, and public release.

Zero Trust architecture for remote access

A Virtual Private Network (VPN) can secure connections between officials abroad and presidential servers, but it shouldn’t be the only safeguard. Adopting a Zero Trust model—where no user, device, or network is trusted by default—adds another layer of protection. Every access request is evaluated based on:

• User identity;
• Device authentication;
• Geographic location of the connection;
• Document sensitivity level;
• Assigned user permissions;
• Behavioral patterns during the session.

For example, accessing a presidential file might require a recognized institutional device, a digital certificate, encrypted connectivity, a physical security key, and a local biometric scan on the machine.

Exclusively institutional devices for state business

Sensitive presidential documents must never be accessed from personal phones or computers. Staff in the Civil Cabinet, General Secretariat, and related departments should use devices and mobile terminals owned and managed by the institution. These tools must be:

• Fully encrypted;
• Regularly updated with security patches;
• Limited to approved applications;
• Segregated from personal use;
• Remotely wipeable if lost or stolen;
• Automatically locked after brief inactivity;
• Blocked from connecting to unsecured public Wi-Fi networks.

A centralized device management system would allow administrators to deploy updates, block dangerous apps, revoke access, and remotely erase data in case of compromise.

Phishing-resistant authentication protocols

A single password—no matter how complex—should never suffice for accessing presidential files. Authentication must combine multiple factors:

• A recognized institutional device;
• A personal PIN or code;
• A physical security key;
• Possibly a local biometric check.

While SMS-based codes can enhance security, they remain vulnerable to certain attacks. For the most sensitive accounts, physical keys and digital certificates offer stronger resistance to phishing attempts. Staff should also receive regular training to recognize fraudulent messages, urgent scams, malicious links, and attempts to impersonate superiors.

WhatsApp: ideal for alerts, not for document transmission

WhatsApp is widely used in Cameroon, including within government circles, thanks to its end-to-end encryption. However, this doesn’t make it suitable for handling presidential documents. Risks include:

• Exposure through lost or compromised devices;
• Screenshots or unauthorized forwarding;
• Weak protections on linked devices or backups;
• Data retention after staff departures.

The app lacks the features needed to classify documents, manage permissions, track versions, record approvals, or ensure proper archiving. It can, however, be used to notify that a file is ready for review—without attaching the document itself. For instance: « The file referenced PRC/SG/2026/125 is available in your secure workspace for review. »

The guiding principle: Use WhatsApp for alerts and coordination; rely on the secure presidential platform for transmission, review, decision-making, signing, and archiving.

Secure government videoconferencing solutions

Remote meetings between the President and advisors should take place on a dedicated government videoconferencing platform that provides:

• Encrypted communications;
• Verified participant identities;
• Strict invitation controls;
• Protection against unauthorized recordings;
• Retention of connection logs;
• Exclusive use of institutional devices;
• Full data hosting oversight.

Public links, free accounts, and unvetted apps must be avoided for discussions involving defense, diplomacy, appointments, or government arbitration.

Classifying documents by sensitivity level

Not all presidential documents carry the same risk. A classification policy could define four categories:

• Public: intended for public release;
• Internal: working documents for government services;
• Confidential: disclosure could harm public action;
• Highly sensitive: relates to defense, intelligence, diplomacy, strategic appointments, or major arbitrations.

Each level determines the authorized transmission channel, permitted users, device restrictions, printing permissions, retention periods, and archival procedures. A public document might be sent via professional email, while a highly sensitive file should only be accessible through a tightly controlled platform.

Complete traceability for every decision

Every consultation, modification, approval, or transmission must be automatically logged. The security journal should detail:

• Who accessed the document;
• When the access occurred;
• Which device was used;
• What changes were made;
• Who approved the final version;
• When the document was filed and published—and by whom.

A dedicated security operations center could detect unusual activity, such as mass downloads, access from unrecognized devices, or unauthorized modifications to official acts. This traceability also enables reconstruction of events in case of leaks, intrusions, or disputes over the authenticity of a decision.

Distinguishing official decisions from social media posts

While the Presidency’s Facebook and X accounts enable rapid public communication, they are not the systems used to prepare and validate decisions. Before a decree appears online, it must follow a secure process:

• The document was transmitted through an authorized channel;
• The competent authority was authenticated;
• The final version remains unaltered;
• The validation is time-stamped;
• The original is preserved in official archives.

A visible signature on an online image does not constitute full digital proof. Security depends on the entire process that preceded publication.

Ten priority measures for the Presidency

To modernize remote governance, the Presidency could implement ten critical actions:

1. Make institutional email under @prc.cm mandatory;
2. Prohibit personal Gmail, Yahoo, and similar accounts for state affairs;
3. Deploy a presidential electronic document management platform;
4. Introduce a secure institutional electronic signature system;
5. Provide exclusively professional phones and computers;
6. Enforce multi-factor authentication resistant to phishing;
7. Reserve WhatsApp for alerts and coordination only;
8. Classify documents by sensitivity level;
9. Centralize access logs in a security operations center;
10. Train staff regularly on espionage, phishing, and information leakage risks.

While no public evidence confirms that Cameroon’s Presidency currently uses all these measures, they represent the minimum standards required for an institution handling remote decisions on finance, diplomacy, security, and national continuity.

The challenges of secure document transmission, electronic signatures, data sovereignty, and digital continuity will be central to E-Gov’A 2026 – E-Gov Africa Summit, Expo & Awards, taking place October 14–16, 2026, at the Palais des Congrès in Yaoundé. Under the theme « Artificial intelligence and e-governance: building efficient public services in a cashless, paperless Africa », the event will bring together public leaders, development agencies, institutions, businesses, experts, and private stakeholders to discuss digital transformation across the continent.

The core question isn’t whether a president can work from Geneva, Paris, or New York. It’s whether the tools used can authenticate decisions, protect state secrets, trace instructions, and ensure no one can alter, divert, or fabricate an act in the President’s name.

Modern tools and accountability

Remote presidential work is not an insurmountable technological challenge. The real obstacle is trust in the tools and procedures. In an era of artificial intelligence, cyberattacks, and digital forgeries, the state can no longer rely on informal digital methods. It must adopt modern solutions that leave a clear, verifiable trail for every critical decision: who posted what, approved what, when, through which channel, and with what security guarantees?