Companies that provide services such as telecommunications and security have been ordered to register their web addresses on Kenyan internet domains as part of efforts to safeguard cybersecurity.
The companies have been given six months to comply with a directive from the Communications Authority to register their web addresses, as announced during a meeting of the National Computer and Cybercrimes Coordination Committee (NC4) on March 14, 2024.
NC4, a multi-agency entity established by the Computer Misuse and Cybercrimes Act of 2018, coordinates national cybersecurity matters and facilitates international cooperation in addressing computer and cyber crimes in Kenya.
“During the meeting, NC4 determined that all systems designated as critical information infrastructure, as stipulated by Gazette Notice No. 1043, must adopt and exclusively use dot KE domain names. Additionally, the security and reliability of any dot KE domain names in use must be ensured,” said Communications Authority Director General David Mugonyi in a notice dated August 1, 2024.
“This directive must be implemented within six months from the date of this public notice.”
According to the referenced gazette notice issued on January 31, 2022, by then-Interior Cabinet Secretary Fred Matiang’i, designated critical entities include mobile communication and internet connectivity firms, judicial institutions, the country’s electoral body, and national security agencies.
Other designated entities include national educational and health institutions, food quality, safety, and research organizations, aviation systems, railway, and road transport support services (such as licensing and ticketing bodies), and power generation and transmission infrastructure, among others.
– By Ann Precious Wangui