ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
10. National Cybersecurity Operations Centre.
Edition: 2024-02-16 · In force
10. National Cybersecurity Operations Centre.
(1)A National Cybersecurity Operations Centre shall be the national focal point for monitoring, detecting, preventing, responding, investigating and attribution of cyber threats, computer and cybercrimes in Kenya.(2)Without prejudice to the generality of paragraph (1), the National Cybersecurity Operations Centre shall—(a)have visibility of threats and incidents that occur in Sector Cybersecurity Operations Centres and Critical Information Infrastructure Cybersecurity Operations Centres;(b)have the capability to perform the functions of a Sector Cybersecurity Operations Centre and Critical Information Infrastructure Cybersecurity Operations Centre;(c)co-ordinate response to cybersecurity incidents within the Sector Cybersecurity Operations Centres and Critical Information Infrastructure Cybersecurity Operations Centres including—(i)co-operating with computer incident response through sharing of threat intelligence to inform response to cyber incidents;(ii)receiving real-time information on cyber threats and incidents from the Cybersecurity Operations Centres;(iii)threat and information sharing;(iv)Incidence response coordination;(v)joint exercises and training of the Cybersecurity Operations Centres; and(vi)supporting supply chain risk management efforts;(d)co-ordinate capacity building programs, research and development activities on cyber threats and incidents;(e)report to the Committee on all cyber incidents reported by the Sector Cybersecurity Operations and critical Information Infrastructure Cybersecurity Operations Centres;(f)convene cybersecurity meetings, colloquiums, webinars, workshops or other consultative platforms for Cybersecurity Operations Centres in order to-(i)facilitate consultations, co-ordination and collaboration in the implementation of relevant policies and laws;(ii)make recommendations to the Committee aimed at improving Cybersecurity in the country;(iii)promote data and information sharing including sharing of experiences, best practices, on emerging issues on Cybersecurity;(iv)create awareness on cybersecurity;(g)undertake research and development for tool engineering;(h)facilitate cooperation of the Committee with Sector Cybersecurity Operations Centres and Critical Information Infrastructure Cybersecurity Operations Centres and other relevant bodies, locally and internationally in response to threats of computer and cybercrime incidents;(i)utilize threat intelligence from internal to enhance its situational capabilities; and(j)facilitate the implementation of standards operating procedures formulated by the Committee to guide the Operations of the Cybersecurity Operations Centres.