Vision: Safe and trusted cyberspace for the people of Kenya CHAPTER 1: INTRODUCTION 1.1 Background Cyberspace is fundamental to the functioning of national and international security systems, trade networks, emergency services, basic communications, and other public and private activities. Cyberspace comprises of the network that connects various Information, Communication and Technology (ICT) infrastructure and includes: Internet, telecommunication networks, the Internet of Things (IoT), various computer systems, mobile communications, and interactions between virtual space and people constituted by information and data. Cyberspace has become a second space for human production and life and stands in juxtaposition to the real spaces of land, sea, air and outer space as the fifth largest strategic space. However, the wide adoption and the evolving nature of cyberspace primarily driven by emerging technologies has created new risks. These risks expose individuals, businesses, national infrastructure and government to cyber threats emanating from a wide variety of sources (state and non-state) and which manifest themselves in disruptive activities. Their effects carry significant risk to public safety, security of the nation and stability of the globally linked economy. The Government of Kenya (GoK) continues to initiate and promote numerous cybersecurity policy and legal initiatives. For instance, the Government developed and enacted various policy, legal and regulatory frameworks aimed at leveraging the opportunities of digital transformation to improve Kenya’s economic development while ensuring digital safety of its people, businesses and interests. Key ICT policies, legal and regulatory frameworks include: Kenya Information and Communications Act, 1998; National Cybersecurity Strategy 2014; National Broadband Strategy 2018; Computer Misuse and Cybercrimes Act (CMCA), 2018; Data Protection Act (DPA), 2019; National ICT Policy Guidelines 2020; and National Digital Master Plan 2022. Kenya developed her first Cybersecurity Strategy in 2014, with the vision, key objectives, and commitment to support national priorities by encouraging ICT growth and proactive protection of critical information infrastructures. Through the 2014 Strategy; Kenya established Kenya Computer Incident Response Team and coordination Centre (KE-CIRT/CC) and the National Digital Forensics Laboratory at the National Police Service under 1