ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
6. Responsibilities of the Committee.
Edition: 2024-02-16 · In force
6. Responsibilities of the Committee.
(1)In performing the functions of the Committee provided under section 6(1) of the Act, the Committee shall—(a)issue prompt and timely advice to the Government on cybersecurity strategies relating to various technologies and sectors;(b)undertake advocacy and create public awareness cybersecurity matters;(c)receive and approve reports from the Cybersecurity Operations Centres;(d)in collaboration with relevant agencies, formulate Information Security Standards;(e)approve the identification and designation of critical information infrastructure;(f)formulate codes of cybersecurity practice and standards of performance for owners of critical information infrastructure and sectors;(g)review the compliance reports submitted by the owners of the critical information infrastructure in accordance with section 13(1) of the Act;(h)evaluate audit reports submitted by the Secretariat on designed critical information infrastructure;(i)approve the development and management of the National Public Key Infrastructure Frameworks;(j)consider and approve non-financial and financial records submitted by the Director prior to submission to the Cabinet Secretary as provided under section 5(2) of the Act;(k)consider reports on emerging technologies and their impacts on security for informed decision making; and(l)co-ordinate cybersecurity research undertaken by the Secretariat and consider the research for informed decision making.(2)Pursuant to section 6(1)(f) and (g) of the Act, the Committee shall coordinate the collection and analysis of cyber threats through collaboration and cooperation with the Cybersecurity Operations Centres and—(a)report to the National Security Council on all cyber incidents reported by the Cybersecurity Operations Centres that threaten Kenya's cyberspace, as envisaged under section 6 (1)(f) of the Act;(b)based on the reports received, advise the National Security matter relating to cybersecurity as provided under section 6(1)(b) of the Act;(c)provide guidance to Cybersecurity Operations Centres for the effective discharge of their respective mandate; and(d)formulate codes of cybersecurity practice and standards operating procedures for the Cybersecurity Operations Centres.