NC4 document library
Find the right document. See what it covers. Explore the official source.
Request access to a restricted document →
Loading documents…
Browse the collection by type, title or year. Document introductions link to official texts; refer to those sources for amendments and applicable provisions.
1–9 of 10 documents
Description
Cybersecurity Standards for Adoption
Description
Supporting regulations for the processing and protection of personal data.
Description
Kenya’s framework for personal data, the rights of data subjects and the responsibilities of organisations processing it.
Description
Guidelines for Implementing Security Operations Centers (SOC)
Description
The National Cybersecurity Strategy 2022-2027 is Kenya's policy roadmap for a secure digital ecosystem. It defines vision, mission, goals, strategic pillars, interventions, timelines, and accountability structures for national cyber resilience.
Description
The Computer Misuse and Cybercrimes (CMCA) Act 2018, Section 9 and CMCA Regulations 2024 Section 18 provides for designation of ICT Infrastructure, Computer and Information Systems and related support technologies as a critical information infrastructure.
Description
The Rapid Reference Guide is a practical toolkit designed to strengthen and harmonise the investigation and prosecution of cybercrime in Kenya.
Description
Gazette Notice No. 1043 of 31 January 2022 formally designates critical infrastructure systems under CMCA section 9. It identifies high-impact sectors and system categories that require enhanced national cybersecurity protection.
Description
Legal Notice No. 44 of 9 February 2024 operationalizes CMCA implementation. It sets detailed compliance, governance, operations-center, audit, reporting, and critical infrastructure protection requirements across public and private sectors.
