ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
37. Protection and preservation of premises and surrounding areas.
Edition: 2024-02-16 · In force
37. Protection and preservation of premises and surrounding areas.
(1)An owner of critical information infrastructure shall implement appropriate safeguards and measures to ensure security of the premises and surrounding areas in which a critical information infrastructure is situated.(2)Without prejudice to the generality of paragraph (1), the security measures on a premises in which a critical information infrastructure is situated may include—(a)systems being maintained in a secure place and preventing unauthorized access of such systems, and considering the nature of the database activity and the sensitivity of information therein;(b)where applicable, sufficient cooling mechanisms to prevent overheating of equipment;(c)backup equipment to prevent or mitigate the effect of a fluctuation of an electric load;(d)taking such actions or measures to monitor and document the entry to and exit from sites in which the database or database systems are located, including the setting and removing of equipment inside and outside the database systems;(e)ensuring that critical information infrastructure is not used for general storage of any material that is not connected to the operations or maintenance of the database;(f)securing the area surrounding the premises or space in which a critical information infrastructure is domiciled; and(g)any other measures necessary to maintain the confidentiality, integrity and availability of the critical information infrastructure.