Kenya Steps Up Fight Against Cybercrime with Enhanced ICT Approval Process

The Communications Authority of Kenya (CA) has recently implemented more stringent approval procedures for Information, Communication, and Technology (ICT) equipment.

This initiative is part of a broader effort to protect public interests, enhance consumer safety, and strengthen the integrity of Kenya's telecommunications infrastructure. On Monday, the CA issued a public notice directing all relevant parties, including manufacturers, vendors, importers, and service providers, to register any equipment intended for connection to the Public Switched Telecommunications Network (PSTN) before its sale or use. This requirement includes a wide range of electronic devices, such as mobile phones, tablets, computers, and other ICT gadgets.

The CA emphasizes the serious consequences of non-compliance, warning that failure to adhere to the type approval requirement could result in legal penalties, including imprisonment for up to three years or a fine of up to Sh5 million. The primary objective of the CA's directive is to ensure that all ICT equipment utilized within the country meets both national and internationally recognized standards. This measure has become increasingly crucial in light of the rising incidence of cybercrime in Kenya. In August, the CA reported a staggering 860 million cyber-attacks recorded over the past year.

The scale and sophistication of these cyber threats have raised significant concerns regarding the security of the nation's critical information infrastructure. To facilitate compliance with these new regulations, the CA has established partnerships with the Kenya Trade Network Agency (Ken Trade) and the National Single Window System. These collaborations aim to streamline the clearance process for permits related to type-approved equipment. Additionally, the CA has published a comprehensive list of type-approved devices on its website, encouraging stakeholders to consult this register to ensure their compliance with the new requirements.

The CA's efforts to enhance the approval process for ICT equipment are part of a larger strategy to bolster cybersecurity in Kenya. The National KE-CIRT/CC, a multi-agency collaborative framework, plays a crucial role in coordinating responses to cybersecurity issues at the national level and works in conjunction with relevant local and international actors. The implementation of the Computer Misuse and Cyber Crimes Act of 2018 has further strengthened this multi-agency approach to cybersecurity.