Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations

9. Cybersecurity Operations Centres.

Edition: 2024-02-16 · In force

9. Cybersecurity Operations Centres.

(1)Pursuant section 6(1)(f) and (g), the Committee shall coordinate the collection and analysis of cyber threat through collaboration and cooperation with the Cybersecurity Operations Centres specified under paragraph (2).

(2)The Cybersecurity Operations Centres contemplated under paragraph (1) shall include-

(a)National Cybersecurity Operations Centre;

(b)Sector Cybersecurity Operations Centres; and

(c)Critical Information Infrastructure Cybersecurity Operations Centres.

(3)The capability of a Cybersecurity Operations Centre shall include-

(a)real time event monitoring, analysis, log collection and aggregation;

(b)an alert system;

(c)cybersecurity specialists organized to prevent, detect, analyse and respond to threats;

(d)asset inventory;

(e)vulnerability management;

(f)network detection and response;

(g)end point detection and response;

(h)intrusion detection;

(i)malware analysis and testing;

(j)threat prevention, monitoring and detection;

(k)incidence response and management; and

(l)threat intelligence platform.

← Previous provision Next provision →

Source: Kenya Law