ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
61. Security automation and checklists for Government Systems.
Edition: 2024-02-16 · In force
61. Security automation and checklists for Government Systems.
(1)The Committee shall within twelve months of commencement of these Regulations, develop administrative security automation operational standards including —(a)reference materials or protocols;(b)checklists providing settings and option selections that minimize the security risks associated with each information technology hardware or software system and security tool used by the National Government and county Governments, enabling standardized and interoperable technologies and architectures; and(c)frameworks for continuous monitoring of information security within the country.(2)The operational standards referred to under paragraph (1) shall be based on—(a)the security risks associated with the use of the system;(b)the number of entities that use a particular system or security tool;(c)the usefulness of the standards, reference materials, or checklists to the users or potential users of the system;(d)the effectiveness of the associated standards, reference material, or checklist in creating or enabling continuous monitoring of information security; or(e)such other factors as the Committee determines to be appropriate.(3)The Committee shall disseminate and make available the standards, reference materials, checklists, or other instruments developed under this regulation.