Vision: Safe and trusted cyberspace for the people of Kenya Finally, Kenyan citizens and non-citizens must take precautions to protect themselves and their valued possessions in the virtual world, just as they do in the physical world. That involves taking all reasonable precautions to protect not only the hardware – phones, computers and other gadgets, but also the data, software, and systems that provide freedom, flexibility, and convenience in their personal and professional lives. 1.3 Strategy Development and Implementation Process Kenya Cybersecurity Strategy 2022 development and implementation process entailed five phases; initiation, stocking and analysis, production, implementation and Monitoring & Evaluation (see figure 3) in line with Kenya’s public policy formulation approach and international best practices. NC4 initiated the Strategy formulation by establishing the National Cybersecurity Strategy Steering Committee who developed a work plan with major steps and activities, key stakeholders, timelines, human, and financial resource requirements. During stocking and analysis, the national cybersecurity capacity status was used to collect data on the strategic national cybersecurity posture and risk landscape that informed drafting of the Strategy. The production phase entailed several meetings and multi-stakeholder workshops that generated this Strategy. The implementation phase entails involving multi-stakeholders to support the execution of the identified initiatives in this strategy. While Monitoring and Evaluation phase is based on the National Integrated Monitoring and Evaluation System (NIMES) framework. INITIATION The lead project authority - NC4 Steering committee - Technical representatives from 17 MDAs ○ Stakeholder Mapping ○ Workplan MONITORING & EVALUATION ○ ○ ○ Kenya NIMES framework Strategy Development Process IMPLEMENTATION ○ Multi-stakeholder implementation STOCKTAKING & ANALYSIS ○ Kenya Cybersecurity Assessment (Maturity, Risks and Challenges) ○ Review of Kenya Cybersecurity Strategy 2014 ○ Analysis of Regional and Global ○ Cybersecurity documents PRODUCTION Consultative meetings Multi-stakeholder workshops and conferences Experts/Practitioners ○ Drafting/Reviews ○ Approval and Publication ○ ○ ○ Figure 3: Strategy Development and Implementation Process 5