Executive Summary Global information and communication technology (ICT) growth has transformed how individuals, businesses, and governments produce and receive information. Adoption of ICT into everyday life is widespread in Kenya. The Government of Kenya is proud of this development and is actively encouraging its continued growth through national initiatives such as Kenya’s Vision 2030, ICT Master Plan, and the recent deployment of nationwide fiberoptic network infrastructure. Such efforts provide a dramatic increase in interconnectivity among businesses and individuals throughout Kenya. Kenyan public and private sector organizations are now using this increased bandwidth and ICT capabilities to efficiently deliver services, conduct business transactions, and share information across organizational, social, and geographic boundaries. As Kenya matures into an information society the nation faces an increasingly evolving cyber threat landscape. Nation states, criminal organizations, and hacktivists from all over the world are—and will continue—to exploit ICT vulnerabilities in Kenya. This is simply a reality that every nation with robust ICT infrastructure faces. While these actors seek to illicitly access, alter, disrupt, or destroy sensitive personal, business, and government information, we are working diligently to evolve our means of protecting information in order to counter today’s threats as well as those coming from over the horizon. In response to these threats, and in direct support of the national priorities and ICT goals defined in Vision 2030, Kenya’s ICT Ministry developed a National Cybersecurity Strategy (Strategy). The Strategy defines Kenya’s cybersecurity vision, key objectives, and ongoing commitment to support national priorities by encouraging ICT growth and aggressively protecting critical information infrastructures. The Government of Kenya is committed to the safety, security, and prosperity of our nation and its partners. We see cybersecurity as a key component in that commitment, providing organizations and individuals with increased confidence in online and mobile transactions, encouraging greater foreign investment, and opening a broader set of trade opportunities within the global marketplace. Successful implementation of the strategy will further enable Kenya to achieve its economic and societal goals through a secure online environment for citizens, industry, and foreign partners to conduct business. Cybersecurity is a shared responsibility. The Government of Kenya will continue to partner with government, private sector, academia, and other non-government entities to implement our Strategy in the most efficient and effective way possible. We have every confidence that we will meet these challenges together and increase recognition of Kenya as a trusted partner and cybersecurity leader in the East African Community (EAC), Africa, and the world. February 2014 1