ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
44. Requirements for an auditor.
Edition: 2024-02-16 · In force
44. Requirements for an auditor.
(1)The Director shall appoint or designate such number of auditors as may be necessary, who shall be responsible for carrying out audit of a critical information infrastructure as provided under section 13 of the Act.(2)A person shall be qualified to be appointed as an auditor for a critical information infrastructure, if the person—(a)is a citizen of Kenya;(b)has a degree from a university recognized in Kenya or equivalent;(c)has at least five years of demonstrable professional experience in the protection of critical information infrastructure;(d)has demonstrable technical skills, competencies and knowledge on critical information infrastructure audit; and(e)satisfies the requirements of Chapter Six of the Constitution.(3)The person appointed as an auditor of a critical information infrastructure under paragraph (1) shall be deemed to be a staff of the Committee.(4)Upon being appointed, the Director shall issue the auditor with an appointment certificate in Form CMCA 4 set out in the Third Schedule.(5)The auditor shall be required to carry and produce the certificate of appointment to the owner of a critical information infrastructure when carrying out an audit exercise.