• ICT PS Esther Koimet said a policy on e-commerce is on the way and cyber crimes will be key in addressing the issue.
• The team will oversee the protection of information infrastructure in the country.
Image: FREDERICK OMONDI
Cyber criminals have been put on notice as a committee to protect information systems in the country was launched in Nairobi on Thursday.
Interior CS Fred Matiang’i called for investment in the cybersecurity industry to be able to match with other parts of the world and ensure safety.
He spoke on Thursday at the launch of the National Computer and Cybercrimes Co-ordination Committee. The committee was created under the Computer Misuse and Cybercrimes Act, 2018.
The cybercrime industry, he added is a $13 billion one.
He said cybersecurity is key in driving any economy ahead.
“Train people to understand the complexity of the challenges we are facing. Cybersecurity is a major thing,” he said.
He said life has gone digital in many ways hence need to adopt through preparation.
“You are either a digital alien, native or immigrant for survival.”
The CS said abuse of social media is rampant but the government will not go to extent of targeting those using the space in an unprofessional way.
“We are a strong democracy and believe in divergent views. Abuse of social media is a major issue and we will do our work as the law says.”
“Cyber terrorists” as Matiang’i called them will now be held to account for their actions.
“Those who wake up and decide to abuse people on their space will have to be dealt with. The law is there for now,” said Matiang’i.
Despite the law being in use, the committee which is supposed to identify various threats and advise on the way forward was not in place.
The new director of the committee is Evans Ombati of National Command Cyber Centre.
Interior PS Karanja Kibicho said operationalisation of the law is a good recourse in addressing the spread of fake and alarming news.
“We promise a robust action and hope to get those hiding behind keyboards to spread lies and alarming information,” said Kibicho.
ICT CS Joe Mucheru said cyber crimes criminals will now be punished.
“We are vulnerable to breaches in the absence of laws that can protect us. With this law, be sure we are now safe,” Mucheru said.
Communication Authority Director General Ezra Chiloba said they have identified and advised on 500,000 incidents so far.
Banking, communication and other sectors are targeted, he said.
ICT PS Esther Koimet said a policy on e-commerce is on the way and cyber crimes will be key in addressing the issue.
The team will oversee the protection of information infrastructure in the country.
Its mandate includes detection, investigation and prosecution of offences such as illegal devices and access codes, cyber espionage, false publication and information, child pornography and computer fraud.
It will also oversee subversion, cyber harassment, identity theft, cyber terrorism and sabotage.
It is a crucial team coming ahead of the 2022 election when there is rampant misinformation.
The committee comprises the Interior Principal Secretary who will be chairperson and those from ICT, Attorney General, Chief of the Kenya Defence Forces, the Inspector-General of the National Police Service and the Director-General of the National Intelligence Service.
Others are Director-General of the Communications Authority of Kenya, the Director of Public Prosecutions and the Governor of the Central Bank of Kenya or their representatives.
The committee advises the government on security related aspects touching on matters relating to blockchain technology, critical infrastructure, mobile money and trust accounts.
It will advise the National Security Council on computer and cybercrimes, coordinate national security organs in matters relating to computer and cybercrimes and receive and act on reports relating to computer and cybercrimes.
It will also develop a framework to facilitate the availability, integrity and confidentiality of critical national information infrastructure including telecommunications and information systems of Kenya, co-ordinate collection and analysis of cyberthreats, and response to cyber incidents that threaten cyberspace belonging to Kenya, whether such threats or incidents of computer and cybercrime occur within or outside Kenya.
Kenyan companies have been victims of cyber attacks.
The committee will cooperate with computer incident response teams and other relevant bodies, locally and internationally on response to threats of computer and cybercrime and incidents.
It is expected to establish codes of cyber-security practice and standards of performance for implementation by owners of critical national information infrastructure and develop and manage a national public key infrastructure framework.
Further, it will develop a framework for training on prevention, illicit and mitigation of computer and cybercrimes and matters connected thereto and perform any other function conferred on it by this.
The team will be headed by a director who shall be appointed for a single term of four years and shall not be eligible for reappointment and the committee shall submit quarterly reports to the National Security Council.
“The director shall designate a system as a critical infrastructure if a disruption of the system would result in the interruption of a life sustaining service including the supply of water, health services and energy, an adverse effect on the economy of the republic, an event that would result in massive casualties or fatalities and failure or substantial disruption of the money market of the Republic.”
Also co-opted into the committee are officials from the Kenya Revenue Authority.