Calls for stronger cyber defences across public, private sectors

Calls have been made for enhanced cybersecurity frameworks across Kenya's public and private sectors, as the country intensifies its digital transformation agenda.

During the 5th Annual Information Security Management Systems Conference in Kisumu, Kenya Bureau of Standards managing director Eng Esther Ngari and National Standards Council chair Chris Wamalwa urged industry players to embed information security into every layer of innovation, particularly as technologies like Artificial Intelligence, 5G and digital health reshape daily life.

 “Security starts with the individual,” said Ngar,i adding that as Kebs, they are not just creating standards but are also building a cybersecurity culture that ensures every Kenyan is part of the solution.”

 Ngari emphasised that Kebs, as the custodian of national standards, plays a pivotal role in shaping a secure digital economy.

 She said the agency has already been certified under ISO/IEC 27001:2022 (Information Security Management Systems) and ISO 22301 (Business Continuity), aligning its operations with international best practices.

 “We are proactive in mitigating cyber threats through staff training, strong password policies, multi factor authentication, and system updates,” she said, stressing that cybersecurity awareness must begin at the individual level.

 This year’s conference, themed “Strengthening Digital Transformation Through Information Security Management Systems in the Era of AI,” focused heavily on the opportunities and risks presented by emerging technologies.

 Wamalwa, in his keynote address, said AI is transforming critical sectors from healthcare to finance but also poses complex ethical and security challenges that require robust governance.

 “We cannot talk about digital progress without also addressing cyber threats,” he said. “Cyber resilience is no longer a technical add-on, it is a public trust issue.”

 He shared a cautionary tale of a Nairobi-based start-up that lost two years of intellectual property in a ransomware attack, calling it a national wake-up call.

  “It wasn’t just data that was stolen, it was their dream,” he said.

 Highlighting the importance of data security in the health sector, Wamalwa cited a pilot digital health system in Homa Bay county.

 The system, despite facing a malware intrusion attempt, remained secure due to early adoption of ISO-aligned data protection protocols.

  “These are not just records, they are lives,” he said, adding that protecting patient data must be a design priority, not an afterthought.

 Ngari also disclosed that Kebs is actively participating in the development of standards governing AI, ensuring its use in Kenya is ethical, inclusive, and safe.

 “AI is reshaping industrial processes and service delivery. But without standards, it becomes a threat,” she warned, referencing Sustainable Development Goal 9, which focuses on innovation and infrastructure.

 Both leaders stressed the urgency of adopting internationally recognized standards like ISO/IEC 27001 across all sectors, warning of increasingly sophisticated threats to critical infrastructure, mobile networks, financial systems, and personal data.

Wamalwa called for deeper public-private collaboration, regular system audits, upskilling of ICT personnel, and greater investment in AI-powered monitoring tools.

 “Every firewall you configure, every system you secure, contributes to something bigger, national trust and economic resilience,” he said.

He also encouraged local enterprises to participate in the upcoming Kenya Quality Awards, where top performers will represent the country in the East Africa Quality Awards.

 The conference continues with stakeholders from government, academia, and the private sector sharing ideas, solutions, and tools to build a cyber-secure Kenya.

 Kebs reaffirmed its commitment to walk alongside partners in ensuring that the nation’s digital future is both innovative and safe.

 “Kebs is ready to partner with all of you,” noted Ngari. “Together, we can secure Kenya’s digital ecosystem.”