Vision: Safe and trusted cyberspace for the people of Kenya EXECUTIVE SUMMARY The National Cybersecurity Strategy 2022 provides direction for a unified approach in the implementation of cybersecurity activities in Kenya. The Strategy establishes foundations and pillars for effective cybersecurity for public and private sector by combining good governance with a set of initiatives and interventions. The Strategy commences with an in-depth background of Kenya’s cybersecurity landscape that highlights existing policy, legal and regulatory frameworks as well as outlining the challenges and threats facing Kenya’s cyberspace. The Strategy’s vision is a safe and trusted cyberspace for the people of Kenya; and a mission to build a secure and resilient cyberspace through a coordinated approach while maximizing on the benefits of a digital economy. The Strategy further provides a framework to defend and protect the cyberspace of the Republic of Kenya guided by the following strategic pillars: 1. Cybersecurity governance; 2. Cybersecurity policies, laws, regulations and standards; 3. Critical Information Infrastructures Protection (CIIP); 4. Cybersecurity capability and capacity building; 5. Cyber-Risks & Cyber-Crimes Management; and 6. Co-operation and collaboration The Strategy also has an implementation matrix which outlines the strategic interventions related to the Strategic Pillars. The matrix assigns roles and responsibilities to various cybersecurity actors to be performed within specified timelines as well as estimated costing of the initiatives. Monitoring and Evaluation of this Strategy is integrated with the National Integrated Monitoring and Evaluation System (NIMES) in order to maintain clear linkages between the implementation of this Strategy and the Vision 2030. A midterm review of this Strategy will be conducted after three (3) years and a final review after five (5) years. ix