MINISTRY OF INFORMATION COMMUNICATIONS AND TECHNOLOGY NATIONAL CYBERSECURITY STRATEGY To promote the Government’s commitment to cybersecurity, the Strategy includes four strategic goals: 1. Enhance the nation’s cybersecurity posture in a manner that facilitates the country’s growth, safety, and prosperity. 2. Build national capability by raising cybersecurity awareness and developing Kenya’s workforce to address cybersecurity needs. 3. Foster information sharing and collaboration among relevant stakeholders to facilitate an information sharing environment focused on achieving the Strategy’s goals and objectives. 4. Provide national leadership by defining the national cybersecurity vision, goals, and objectives and coordinating cybersecurity initiatives at the national level. The subsequent sections outline specific objectives for each goal. Goal 1: Enhance the Nation’s Cybersecurity Posture Objective: Protect Critical Information Infrastructure The Government of Kenya is promoting ICT usage to both the government and the Kenyan public through an undersea and terrestrial cable and network installations, increased availability of mobile/wireless technology, and a movement towards e-government services. However, the increased use of and reliance on ICT exposes Kenya to increased cyber risks. Threat actors can exploit ICT vulnerabilities to perpetrate crimes against the Government of Kenya and Kenya’s citizens who rely on ICT to perform electronic transactions or obtain key critical government services. Also, natural disaster may pose a threat by causing potential damage critical information infrastructure and disrupting communications. As such, it is imperative that as the Government of Kenya protect critical information infrastructure. Its cybersecurity activities should also be flexible enough to counter and mitigate the increasingly complex threats and vulnerabilities to ICT infrastructures. The Government of Kenya is taking steps to increase the security and resilience of its critical information infrastructure to protect its government, citizens and residents, and corporations from cyber threats and to reap the social and economic benefits of cyberspace. The government is doing this through a coordinated 6 February 2014