The Cybersecurity Threat Landscape in Kenya
Kenya is among Africa's most targeted nations for cybercrime. In 2024, Kenyan businesses and individuals lost an estimated KES 9.4 billion to cybercrime according to the Communications Authority of Kenya. Common threats include:
- Phishing attacks – Fraudulent emails impersonating banks, KRA, and Safaricom
- Ransomware – Encrypting business data and demanding Bitcoin ransom
- Business Email Compromise (BEC) – Intercepting supplier payment instructions
- M-Pesa fraud – Social engineering to obtain M-Pesa credentials
- Data breaches – Theft of customer PII (personally identifiable information)
- Insider threats – Employees stealing or misusing business data
Kenya Data Protection Act 2019 — What Businesses Must Know
The Kenya Data Protection Act (DPA) 2019, enforced by the Office of the Data Protection Commissioner (ODPC), requires all organizations handling personal data to:
- Register as Data Controllers or Processors
- Collect data with explicit consent
- Implement appropriate technical security measures
- Report data breaches to ODPC within 72 hours
- Publish a Privacy Policy
Non-compliance can result in fines up to KES 5 million or 1% of annual turnover.
Cybersecurity Best Practices for Kenyan SMEs
- Use strong, unique passwords with a password manager
- Enable Multi-Factor Authentication (MFA) on all business accounts
- Keep software and operating systems updated
- Conduct employee cybersecurity awareness training
- Back up data daily (3-2-1 backup rule)
- Use an enterprise firewall and endpoint protection
- Conduct regular penetration testing
Beatsy Solutions Cybersecurity Services
- Security audits – Vulnerability assessment of your systems
- Penetration testing – Ethical hacking to find weaknesses before attackers do
- Data Protection Act compliance – Registration, privacy policy, DPA frameworks
- Secure software development – OWASP-compliant coding practices
- SSL/TLS implementation – Encrypt all web traffic
- Employee security training – Awareness workshops in Nairobi and Thika
Explore our cybersecurity solutions or contact our security team in Nairobi or Thika for a free assessment.