Vision: Safe and trusted cyberspace for the people of Kenya CHAPTER 3: STRATEGIES 3.1 Cybersecurity Governance Cybersecurity governance is critical in developing a vibrant cybersecurity ecosystem for a digital economy. Figure 5 provides the cybersecurity governance structure linking all the key actors through NC4 to the National Security Council. Enhancing Kenya’s cybersecurity governance will lay foundations for protecting Kenya from cyber threats in the long term. The Cybersecurity governance pillar provides strategic guidance on governance structures and resources required to support formulation and implementation of a secure national cyber ecosystem. The goal, objective and interventions in this pillar are: Goal: Enhance Kenya’s institutional framework for cybersecurity governance and coordination. Objective: Improve governance, cybersecurity in Kenya. resource allocation and coordination of Interventions: a. Allocate the NC4 Secretariat with dedicated budget, human capacity, infrastructure and tools to effectively support NC4 implement its mandate. b. Review the multi-agency governance structure by establishing an autonomous cybersecurity entity (National Cybersecurity Agency). c. Upgrade the Kenya Computer Incident Response Team (KE-CIRT) to the National Multi-Stakeholder Computer Incident Response Team of the Republic of Kenya. d. Establish a National Cybersecurity Operation Centre (NSOC). e. Establish/Enhance Cybersecurity Operation Centers (SOC) in CIIs. f. Establish/enhance specialized cybersecurity units and Sector CIRTs (Defence, Intelligence, Police, Public Prosecutions, Judiciary and Sector CIRTs). g. Establish Joint Cybersecurity technical working groups. Outcome: Effective governance and coordination of cybersecurity in Kenya. 8