The 7th Annual Information Security Management Systems (ISMS) Conference will take place from 11–14 May 2027 in Mombasa, Kenya, jointly convened by the National Computer and Cybercrimes Coordination Committee (NC4) and the Kenya Bureau of Standards (KEBS). An exhibition will run alongside the conference from 11–13 May 2027, providing a platform for participating organisations to showcase capabilities, solutions and services relevant to information security, governance and resilience.
Held under the theme “From Compliance to National Resilience: Advancing ISMS for Governance, Critical Infrastructure Resilience and Sustainable Development,” the 2027 conference will focus on moving information security beyond a compliance-driven approach towards mission-driven, adaptive and systemic resilience. The conference recognises compliance as an essential foundation while placing greater emphasis on whether institutions and critical systems can maintain essential functions, recover from disruption and adapt as risks evolve.
This focus comes at a time when Kenya’s economy, public administration and essential services are increasingly dependent on interconnected digital infrastructure. Government services, telecommunications, financial systems, energy, transport, healthcare and other critical sectors now operate within an environment where disruption in one organisation or sector can have wider consequences for citizens, economic activity, public safety and national functions. The conference will therefore examine how standards, governance, cybersecurity regulation and operational capability can work together to strengthen resilience across institutions and sectors.
Discussions will be organised around six key areas: law, regulation and regulatory assurance; standards and ISMS; organisational governance and accountability; Critical Information Infrastructure resilience; national resilience; and national security and sustainable development. Artificial intelligence and other emerging technologies will be considered across these areas where they affect governance, risk management, operational security and resilience.
The four-day programme will combine masterclasses, implementation workshops, strategic plenaries, leadership panels, practitioner sessions, case studies, exhibitions and a cross-sector resilience exercise. The conference will conclude with a Critical National Functions Resilience Exercise, designed to challenge participants with a realistic cross-sector disruption scenario requiring decisions on incident escalation, continuity of essential services, coordination, communication, recovery priorities and post-incident adaptation.
The conference is expected to bring together CISOs, CIOs, Directors and Heads of Departments, ISMS Management Representatives, Critical Information Infrastructure owners and operators, regulators, risk and audit professionals, national and county government institutions, national-security practitioners, academia, professional associations and industry. This broad participation reflects the recognition that national cyber resilience requires more than technical controls; it depends on leadership, governance, investment, standards, coordination and sustained collaboration across sectors.
Building on six previous editions, the 7th Annual ISMS Conference will provide a national platform for converting information-security requirements into stronger institutional capability and more resilient critical services. Expected outputs include recommendations on cyber-risk governance and accountability, approaches for measuring organisational and sectoral cyber resilience, analysis of Critical Information Infrastructure interdependencies, findings from the cross-sector resilience exercise and a 7th ISMS Conference Communiqué setting out priority areas for institutional and national action.
>Save the Date: 11–14 May 2027 | Mombasa, Kenya
From compliance to capability. From capability to resilience. From organisational resilience to national resilience.