Vision: Safe and trusted cyberspace for the people of Kenya Cybersecurity statistics indicate that the number of cyber threats detected in Kenya has significantly increased in the last three years. For instance, 143,040,599 cyber threats were detected in July-September 2021 as compared to 4589 threats detected in July-September 2017 (see figure 2). Total Cyber Threats Detected :ƵůͲ^ĞƉƚϮϬϮϭ ƉƌͲ:ƵŶĞϮϬϮϭ :ĂŶͲDĂƌϮϬϮϭ KĐƚͲĞĐϮϬϮϬ :ƵůͲ^ĞƉϮϬϮϬ ƉƌͲ:ƵŶϮϬϮϬ :ĂŶͲDĂƌϮϬϮϬ KĐƚͲĞĐϮϬϭϵ :ƵůͲ^ĞƉƚϮϬϭϵ ƉƌͲ:ƵŶϮϬϭϵ :ĂŶͲDĂƌϮϬϭϵ KĐƚͲĞĐϮϬϭϴ :ƵůͲ^ĞƉϮϬϭϴ ƉƌͲ:ƵŶϮϬϭϴ :ĂŶͲDĂƌϮϬϭϴ KĐƚͲĞĐϮϬϭϳ :ƵůͲ^ĞƉϮϬϭϳ ϭϲϬ͕ϬϬϬ͕ϬϬϬ ϭϰϬ͕ϬϬϬ͕ϬϬϬ ϭϮϬ͕ϬϬϬ͕ϬϬϬ ϭϬϬ͕ϬϬϬ͕ϬϬϬ ϴϬ͕ϬϬϬ͕ϬϬϬ ϲϬ͕ϬϬϬ͕ϬϬϬ ϰϬ͕ϬϬϬ͕ϬϬϬ ϮϬ͕ϬϬϬ͕ϬϬϬ Ϭ Figure 2: Total Cyber Threats Detected Source: KIPPRA 2022 (Computed from various CA reports) To facilitate actualization of GoK cybersecurity initiatives, and address the above challenges and threats, this Strategy aims to enhance institutional framework for cybersecurity governance and coordination; strengthen cybersecurity policy, legal and regulatory frameworks; enhance the protection and resilience of CIIs; strengthen cybersecurity capability and capacity; minimize cybersecurity risks and crimes and foster national and international cooperation and collaboration. GoK will spearhead its main responsibility of defending the Republic of Kenya’s cyberspace from all threats, to protect Kenyan citizens and the economy from harm, and to establish domestic and international frameworks to safeguard national interests, protect fundamental rights, and prosecute offenders. Similarly, Critical Information Infrastructure owners/operators, businesses and organizations in Kenya have the obligation of implementing measures to protect their critical systems and services by adopting a risk-based approach towards cybersecurity, managing vendor cybersecurity risks, adopting minimum cybersecurity baseline standards and supporting the government through reporting and response to cybersecurity matters. 4