How Kenya is rethinking Cybersecurity in the Age of AI

There was a time when conversations about national security focused almost entirely on borders, crime and physical infrastructure.

Today, a growing part of Kenya’s economy exists online. Millions of people pay bills digitally, apply for government services through their phones and store personal information on online platforms.

As the country becomes increasingly digital, a new question is emerging: How do you protect a nation that is increasingly connected?

That question is now moving to the center of government policy.

A Country Increasingly Built Online

Kenya’s digital transformation has accelerated rapidly over the past few years. Government services that once required long queues and paperwork can now be accessed with a few taps on a smartphone.

The eCitizen platform alone now hosts more than 24,000 government services, serves over 15 million users and processes around 500,000 transactions every day.

These platforms have improved convenience, increased efficiency and made public services more accessible to millions of Kenyans.

But every new digital service also creates a new responsibility. As more information moves online, protecting the systems that hold and process that information becomes increasingly important.

When data becomes national infrastructure

In the digital era, national infrastructure extends far beyond roads, ports and electricity networks.

Cloud systems, telecommunications networks, digital payment platforms and government databases have become essential to the country’s day-to-day functioning. A major cyberattack on any of these systems could disrupt services, compromise sensitive information and undermine public confidence.

Recognizing this reality, the government has been strengthening its cybersecurity framework through the implementation of cybercrime laws, new regulations governing critical information infrastructure and the establishment of institutions dedicated to coordinating responses to digital threats.

Parliament has also approved the establishment of the National Cybersecurity Agency to improve national preparedness and resilience against evolving cyber risks.

The message is increasingly clear: protecting digital infrastructure is now part of protecting the country itself.

The dark side of AI

The rapid rise of artificial intelligence is creating exciting possibilities for economic growth, innovation and improved service delivery.

However, it is also creating entirely new risks.

Around the world, AI is already being used to generate convincing fake videos and images, spread misinformation, conduct sophisticated fraud and manipulate identities online. These emerging threats have forced governments everywhere to reconsider how technology should be governed.

For Kenya, the challenge is twofold: embracing the opportunities presented by artificial intelligence while ensuring safeguards exist to protect citizens, institutions and public trust.

As digital technologies become more sophisticated, cybersecurity can no longer be separated from conversations about responsible AI governance.

Beyond being consumers of technology

Another important theme emerging from government thinking is the need to build local capacity.

For years, African countries have largely imported digital solutions and technologies developed elsewhere. Increasingly, however, there is recognition that sustainable digital security requires local expertise and innovation.

The government’s vision is not simply to use cybersecurity solutions designed abroad, but to encourage the development of homegrown technologies and skilled professionals capable of designing, building and eventually exporting trusted cybersecurity solutions.

This approach positions cybersecurity not only as a defensive necessity but also as a potential economic opportunity capable of creating jobs, encouraging innovation and strengthening Kenya’s competitiveness in the digital economy.

Kenya’s most valuable digital asset

The success of Kenya’s digital transformation will ultimately depend on one thing: trust.

People will only continue embracing digital services if they believe their information is secure, their transactions are protected and the systems they rely on can withstand emerging threats.

As more aspects of daily life migrate online, cybersecurity is no longer simply an issue for technology experts or government agencies. It has become a national development question that touches public services, economic growth and citizen confidence.

Kenya’s digital future will not be defined solely by how quickly the country adopts new technologies. It will also be defined by how effectively it protects them. And in an increasingly connected world, trust may prove to be the country’s most valuable digital asset.