Vision: Safe and trusted cyberspace for the people of Kenya NATIONAL SECURITY COUNCIL (NSC) MEMBERS PS INTERIOR - CHAIR PS ICT ○ AG ○ CDF KDF ○ DG NIS ○ IG NPS ○ DPP ○ DG CA ○ GOV CBK ○ DIR - SECRETARY ○ ○ NC4 SECRETARIAT ................................................................................................. .... NATIONAL NATIONAL CYBERSECURITY OPERATIONS CENTRE CYBER SECURITY (NSOC) OPERATIONS NATIONAL COMPUTER & CYBERCRIMES COORDINATION COMMITTEE (NC4) CYBERSECURITY TECHNICAL WORKING GROUPS (CTWG) KENYA CYBER INCIDENT RESPONSE TEAM (KE-CIRT) CII SOCs ○ SECTOR CIRTS PUBLIC & PRIVATE CIIs ○ ○ ○ ○ ○ TELECOMMUNICATION BANKING & FINANCE TRANSPORT & ENERGY EDUCATION & HEALTH DEFENCE & SECURITY Figure 5: Cybersecurity Governance Structure 3.2. Cybersecurity Policies, Laws, Regulations & Standards Development of a safe, secure and resilient cyberspace ecosystem requires a robust policy, legal and regulatory framework. Figure 6 outlines all the key components and their relationship in the design and implementation of an Information Security Management System (ISMS) which is a key target in securing information assets in Kenya. Enhancing Kenya’s effort to formulate and implement coherent cybersecurity policy, legislation, regulations and standards will require the involvement of key actors drawn from both the public and private sector. The goal, objective and interventions in this pillar are: Goal: Strengthen cybersecurity policies, laws, regulations and Standards. Objective: Have up-to-date cybersecurity policies, laws, regulations and standards. Interventions: a. Review cybersecurity policies, laws, regulations and standards. b. Amend/update cybersecurity policies, laws, regulations and standards. 9