InsightAugust 2026
Data protection
Kenya Data Protection Act (DPA) 2019
A practical compliance roadmap covering ODPC registration, lawful processing, data subject rights, DPIAs, breach notification, and enforcement exposure.
Read the full guideSecurity field notes
Practical guidance for a changing threat landscape
Full-length guides on the laws, standards, and controls shaping security across Kenya and East Africa.
InsightGuideAugust 2026
Payment security
PCI DSS v4.0.1 Transition Guide
Understand the new requirements for fintechs and payment processors, including MFA, WAF coverage, script management, segmentation testing, and SBOMs.
Read the full guideInsightAugust 2026
Information security
ISO 27001:2022 Certification
Move from preparation to continuous improvement with a clear view of the 93 Annex A controls, new controls, migration strategy, and audit evidence.
Read the full guideBriefingAugust 2026
Financial services
CBK Cybersecurity Guidelines
Interpret the requirements shaping Kenya's financial sector, from vulnerability management and audit trails to zero trust and third-party risk.
Read the full guide