Cybersecurity Standards for Adoption
Description
Cybersecurity Standards for Adoption
Legal & policy library
Find Kenya’s cybersecurity laws, supporting regulations and national strategy, with plain-language introductions and official sources.
Understand the language
Browse document descriptions before opening the official reference.
Loading documents…
These introductions are reference aids. Read the linked official texts for applicable provisions, amendments and judicial decisions.
1–9 of 10 documents
Description
Cybersecurity Standards for Adoption
Description
Supporting regulations for the processing and protection of personal data.
Description
Kenya’s framework for personal data, the rights of data subjects and the responsibilities of organisations processing it.
Description
Guidelines for Implementing Security Operations Centers (SOC)
Description
The National Cybersecurity Strategy 2022-2027 is Kenya's policy roadmap for a secure digital ecosystem. It defines vision, mission, goals, strategic pillars, interventions, timelines, and accountability structures for national cyber resilience.
Description
The Computer Misuse and Cybercrimes (CMCA) Act 2018, Section 9 and CMCA Regulations 2024 Section 18 provides for designation of ICT Infrastructure, Computer and Information Systems and related support technologies as a critical information infrastructure.
Description
The Rapid Reference Guide is a practical toolkit designed to strengthen and harmonise the investigation and prosecution of cybercrime in Kenya.
Description
Gazette Notice No. 1043 of 31 January 2022 formally designates critical infrastructure systems under CMCA section 9. It identifies high-impact sectors and system categories that require enhanced national cybersecurity protection.
Description
Legal Notice No. 44 of 9 February 2024 operationalizes CMCA implementation. It sets detailed compliance, governance, operations-center, audit, reporting, and critical infrastructure protection requirements across public and private sectors.