ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
12. Critical Information Infrastructure Cybersecurity Operations Centre.
Edition: 2024-02-16 · In force
12. Critical Information Infrastructure Cybersecurity Operations Centre.
(1)A Critical Information Infrastructure Cybersecurity Operations Centre shall be responsible for monitoring, detecting, preventing, responding and investigating of cyber threats, in a Critical Information Infrastructure.(2)Without prejudice to the generality of paragraph (1), the Critical Information Infrastructure Cybersecurity Operations Centre shall—(a)provide real-time information on cyber threats and incidents to the National Cybersecurity Operations Centre and Sector Cybersecurity Operations Centre;(b)collaborate with the relevant agencies, on cyber threat surveillance and analysis;(c)have the requisite capability to detect, monitor, prohibit, prevent, respond and investigate cyber threats, computer and cybercrimes in the concerned organization;(d)be responsible for incidence detection, analysis and response in the organization;(e)undertake capacity building programs, research and development activities on cyber threats and incidents in the organization;(f)report to the respective Sector Cybersecurity Operations Centre on all cyber incidents reported in the organization;(g)undertake research and development for tool engineering;(h)co-operate with other Critical Information Infrastructure Cybersecurity Operations Centres in the concerned Sector;(i)utilize threat surveillance from internal and external sources to enhance its situational awareness and response capabilities; and(j)implement the codes or standard operating procedures formulated by the Committee to guide the Operations of the Critical Information Infrastructure Cybersecurity Operations Centres.(3)Each owner of a Critical Information Infrastructure shall meet the administrative costs and other expenses of their respective Critical Information Infrastructure Cybersecurity Operations Centre.