Kenya sharpens digital trust agenda as cyber threats surge

By Alloys Musyoka

The government has intensified efforts to strengthen digital trust, governance, and cybersecurity as it advances its transition into a fully digitized economy, marked by rapid expansion of online public services and rising cyber risks.

Speaking during the ISACA Kenya Chapter 2026 conference in Mombasa, Cabinet Secretary for Information and the Digital Economy, William Kabogo, said the country’s digital transformation has moved beyond adoption and innovation into a new phase focused on accountability, system resilience, and trust.

“The digital economy is no longer imagined; it is established. What is now at stake is not consensus but governance—not innovation alone, but accountability,” he said.

His remarks come as Kenya accelerates the digitization of public services through the eCitizen platform and expands national ICT infrastructure, even as it confronts an unprecedented rise in cyber threats targeting critical systems.

The government reported significant growth in fibre optic connectivity, which has expanded from about 8,900 kilometres in 2022 to approximately 30,000 kilometres currently, with a long-term target of 100,000 kilometres.

Public service delivery has also undergone rapid digitization, with services on the eCitizen platform increasing from fewer than 400 in 2022 to more than 23,000 today.

Kabogo also highlighted ongoing digital inclusion efforts, including digital literacy training for nearly 1.9 million young people and the rollout of hundreds of digital hubs across the country aimed at improving access to digital services.

Despite these gains, the government warned of escalating cyber risks. The Cabinet Secretary cited data showing 4.56 billion cyber events recorded in a single quarter, representing a 441 percent surge.

He cautioned that the risks are no longer abstract but directly tied to essential national systems.

“These events land on real infrastructure—on our banks, hospitals, revenue platforms, and mobile money rails that carry over 100 million transactions in a single day,” he said.

Kabogo added that any failure in digital systems could have immediate consequences for public confidence and economic stability.

To respond to the evolving threat landscape, the government is reviewing key legal frameworks, including the Kenya Information and Communications Act, while strengthening enforcement of the Data Protection Act through the Office of the Data Protection Commissioner.

Authorities noted that the commission has already issued compensation orders in several cases involving telecom operators, digital lenders, and private platforms.

New policy instruments are also under development, including a Kenya Cloud Policy and an Artificial Intelligence and Emerging Technologies Policy, aimed at strengthening data sovereignty and regulating emerging technologies.

“Innovations will not be slowed, but they will not be ungoverned,” Kabogo emphasized.

He noted that artificial intelligence must be developed within strong governance frameworks to ensure public trust and responsible use.

“We must not simply digitize; we must govern at a world-class level,” he said.

Three national priorities were outlined: strengthening digital governance, building cybersecurity and data protection capacity, and deepening collaboration between government and industry stakeholders.

At the same conference, ISACA Kenya Chapter President Bonface Asiligwa emphasized that the digital era demands a deeper focus on trust, resilience, and adaptability across organizations.

Speaking during the conference, Asiligwa noted that digital governance is evolving beyond compliance.

“The conversation is now shifting from compliance to resilience, from control to adaptability, and from technology to trust—where digital trust becomes central,” he said.

He added that digital trust is increasingly shaping leadership and organizational reputation.

“Digital trust is at the center of everything. It determines how organizations are perceived and, increasingly, how leadership is defined,” he noted.

Asiligwa also highlighted the challenges faced by cybersecurity, audit, and risk professionals operating in increasingly complex environments.

“Threats evolve faster than controls. Expectations continue to rise. Resources are often constrained, and decisions must be made with incomplete information,” he said.

He observed that many system failures are often preceded by early warning signals that go unheeded due to misalignment or delayed execution.

Kenya is positioning itself as a regional leader in digital transformation, with upcoming forums such as the Connected Africa Summit expected to advance continental discussions on digital integration, trust, and governance.

Officials and industry leaders agree that the next phase of Kenya’s digital journey will depend less on how quickly systems are built and more on how securely and responsibly they are governed.

Scroll to Top