Kenya strengthens cybersecurity and AI governance amid growing cyber risks

The government has intensified efforts to strengthen Kenya’s cybersecurity systems and artificial intelligence (AI) governance frameworks amid growing concerns over rising cyber threats targeting critical digital infrastructure that supports public service delivery.

Speaking during the opening of the Sixth Annual Information Security Management Systems (ISMS) Conference in Naivasha, Principal Secretary for Internal Security and National Administration Raymond Omollo said Kenya’s rapid digital transformation has enhanced service delivery but also increased the country’s exposure to cyber risks.

“The more Government services move online, the more public information moves online, and the more deliberate we must be in securing the systems that support them,” PS Omollo said.

He noted that digital platforms such as eCitizen have become central to government operations, serving more than 15 million users and processing approximately 500,000 transactions every day under the country’s Bottom-Up Economic Transformation Agenda (BETA).

“Serving about 15 million users and processing approximately 500,000 transactions daily, eCitizen is a clear demonstration of the economic and public service transformation foreseen under the BETA Digital Superhighway pillar,” he said.

Omollo warned that national security now extends beyond protecting physical infrastructure to safeguarding the digital systems that underpin essential public services.

“National security is no longer confined to traditional security infrastructure. Today, it includes protecting cloud systems, digital payment platforms, telecommunications networks and critical information infrastructure that citizens depend on every day,” he said.

He further cautioned that emerging technologies such as artificial intelligence are rapidly reshaping the cyber threat landscape, making cyberattacks more sophisticated and increasingly difficult to detect.

“As technology evolves, we are witnessing the emergence of AI-generated deepfakes, sophisticated misinformation campaigns and new forms of cybercrime that threaten public trust and national security. Our response must evolve just as rapidly,” he said.

Omollo said the government has strengthened its legal and regulatory framework, including the Computer Misuse and Cybercrimes Act and the Critical Information Infrastructure Protection and Cybersecurity Management Regulations, 2024, to enhance the country’s resilience against cyber threats.

He added that Parliament has approved the establishment of a National Cybersecurity Agency to strengthen coordination and improve responses to cyber incidents.

The PS also called on stakeholders to harness artificial intelligence to bolster cybersecurity while investing in local innovation and skills development to position Kenya as a producer of trusted digital security solutions.

He urged participants at the conference to develop practical strategies to strengthen information security standards and support the country’s broader digital transformation agenda.