I want to bring to you attention an important thing about the Country Code Top-Level Domain
(ccTLD) of the Gambia. Presently we are the only country I think who does not ‘control’ their
Country Code Top-Level Domains (ccTLDs). I wrote this some time ago in the newspapers but
still it is not in the control of the country. If you do a domain name lookup for .gm this is what you

get.
Who’s behind .GM domains?
Sponsoring Organisation
GM-NIC
NIC Gambia (GM-NIC) c/o Studio 361
P.O. Box 4080
Bakau, The Gambia
Gambia
Administrative Contact
Jorn Grotnes
admin@nic.gm
+220 392728
+220 391020
GM-NIC
P.O. Box 2647
Serrekunda
Gambia
Technical Contact
Jorn Grotnes
technical@nic.gm
+220 392728
+220 3911020
GM-NIC
P.O. Box 2647
Serrekunda
Gambia
First let us just give a brief understanding of Domain names. We have Generic Top-Level Domains
(gTLDs) and Country Code Top-Level Domains (ccTLDs). Generic Top-Level Domains (gTLDs):
These are managed by the Internet Corporation for Assigned Names and Numbers (ICANN), a
nonprofit organization responsible for coordinating the maintenance and procedures of several
databases related to the namespaces and numerical spaces of the Internet. Country Code Top-Level
Domains (ccTLDs): These are managed by various entities depending on the country. For example,
“.uk” for the United Kingdom is managed by Nominet, while “.fr” for France is managed by
AFNIC and in Senegal the .sn is managed by Cheikh Anta Diop University. ICANN oversees the
Domain Name System (DNS) and coordinates the assignment of TLDs and the operation of root
name servers. However, specific management and policies for each TLD can vary depending on
the organization responsible for its management. Nominet is the domain name registry for .uk
domain names, which includes.co.uk, org.uk,. me.uk, and several other suffixes associated with

the United Kingdom. It is a nonprofit organization established in 1996 and is responsible for
managing and operating the infrastructure for these domain names. Nominet operates
independently of the UK government, but its activities are regulated by various governmental
bodies, and it collaborates with government agencies on internet-related policies and issues. In
times of national emergencies or cyber threats, Nominet may collaborate with government
agencies and law enforcement authorities to mitigate risks and ensure the stability and security of
the .uk domain space.

Our Country Code Top-Level Domains (ccTLDs) name is under the control of one Mr Jorn
Grotnes. I think for him to register the .gm he first registered a company or an organisation in the
Gambia and use that address to register our country domain name. From my initial inquiries I was
told the government was aware at that time. Mr Jorn Grotnes is a not a Gambian but a Norwegian,
I don’t understand why a Norwegian should be controlling our ccTLD. To register a domain name
in the Gambia one needs to pay D600 and then D400 every year for renewal. I think Mr Jorn is
just using ccTLD for business purposes. Most countries have regulations and requirements in place
that govern who can register and manage domain names under their ccTLDs. These regulations
often include residency or legal presence requirements, as well as specific policies regarding
domain registration and administration. For the case of Mr Jorn the question is he still operating a
business in the Gambia, or he just open a doomy business to get hold of our ccTLD? The
government can use their regulations and policies to get the .gm from Mr Jorn.
Another critical concern lies in the fact that all equipment necessary for the setup and management
of the .gm domain is situated in Norway. This presents a significant security risk. Essentially, all
.gm domains registered are subject to security protocols and infrastructure located in a foreign
country.
Questions arise regarding whether this setup complies with the regulations and requirements
within Gambia and the Economic Community of West African States (ECOWAS). This security
aspect must be treated as a top priority for our nation, especially in light of the evolving Cyber
Security threat landscape and the presence of threat actors.
It is imperative that we address this security challenge with utmost urgency and vigilance to
safeguard the integrity and security of our digital infrastructure and online presence.
I know at some time ago the government was negotiating to get back our ccTLD but I think they
need to do this thing as soon as possible and probably hand it over the University of the Gambia
(UTG). This should not be a very difficult task to accomplish, they just need some lawyers and
experts in this area to help them retain our ccTLD. This is very important especially with the
current Cyber Security Threat Landscape.

Regards,
Dr Barra Touray.
Cyber Security Lecturer, UK.