[kictanet] Government acts on driving e-commerce growth

Thu Mar 21 10:31:54 EAT 2013

Almost 100% of the internet functions via open source
standards/technologies, yet the internet is never going to be completely
secure.

We need to educate the public that open source technologies/standards are
rarely more secure than our personal behaved.

We often blame proprietary client/server technologies for insecurity where
network security also fails to stop breaches.

To steal passwords, have not even binoculars been used to note finger
movements/positionings on keyboard?
On Mar 21, 2013 9:52 AM, "Evans Ikua" <ikua.evans at gmail.com> wrote:

> This is something that should have happened already and I wish those
> involved godspeed in the implementation. Its god that the government is
> taking this initiative and it will be interesting to see exactly how CCK is
> planning to get the private sector to participate. Lets have that
> information soon.
>
> At the same time, just a word of caution, PKI is not a silver bullet for
> security.  I am not sure if PKI will reduce the instance of cyber
> insecurity, other than providing for non-repudiation and authenticity. The
> implementation is much more than just getting the vendor to install the
> technology. There are many pitfalls and challenges. Then there is there is
> the education of users, in this case the entire population. Encryption is
> one of the most complicated subjects there is.
>
> Just my thoughts.
> Evans
>
> On Thu, Mar 21, 2013 at 8:23 AM, Dorcas Muthoni <dmuthoni at gmail.com>wrote:
>
>> Sounds very good..can you please share with us envisaged use cases
>> especially for Government-2-Citizen, e-commerce providers deploying SaaS
>> solutions.
>>
>> Alternatively, please give us a link to more detailed information on
>> services accessible via the infrastructure to application developers.
>>
>> On Wed, Mar 20, 2013 at 4:59 PM, Phyllis Nyambura <pnyambura at ict.go.ke>wrote:
>>
>>> *Government acts on driving e-commerce growth*
>>>
>>>
>>> **
>>>
>>> *Establishment of a secure online environment will be implemented come
>>> October
>>> *
>>>
>>>
>>> **
>>>
>>> *Nairobi 20th March, 2013: *The government through the Kenya ICT board,
>>> Communications Commission of Kenya (CCK) and Directorate of E-government,
>>> today held a forum with stakeholders to sensitise them on what it will take
>>> to secure online transactions. Public Key Infrastructure (PKI), is the
>>> national system that the government is implementing to provide digital
>>> certification services.
>>>
>>>
>>> Through the Public Key Infrastructure (PKI), the government will set up
>>> an online identity and verification system where each citizen will be
>>> issued with a unique online identity (digital certificate) that will be
>>> required whenever they take part in online transactions. The project is
>>> being implemented by Korea technology company Samsung SDS.
>>>
>>>
>>> “Electronic signing is the most ensuring method to help solve a lot of
>>> the on-line crimes we see such as hacking, identity theft and forgery of
>>> sensitive information. Interested individuals will apply for a digital
>>> certificate using their name and ID number and later called in for a
>>> face-to-face authentication process by the Accredited Certificate
>>> Authority. Following the verification process, the applicants will then be
>>> authorized to download the digital certificate to the PC or USB (HSM
>>> token),” explained Evans Kahuthu, Project Manager Information Security at
>>> the Kenya ICT Board.
>>>
>>>
>>> The online certificate will be a unique Internet ID (a cryptographic
>>> key) that will facilitate access to on-line government services leading to
>>> increased online business.
>>>
>>>
>>>
>>> “Going forward, we will be getting into complex, sophisticated and very
>>> hard to investigate organized cybercrime. It is therefore prudent that the
>>> government readies itself to tackle these new challenges,” said Francis
>>> Mwaura, Senior Assistant Director, and Directorate of E-Government.
>>>
>>>  “As the government moves to automate and digitize its records,
>>> e-government will handle a lot of sensitive data, and this calls for
>>> security of these records,” added Francis Mwaura.
>>>
>>>
>>>
>>> The project expected date of completion is October and it will be
>>> piloted at the Kenya Revenue Authority before a roll-out to other
>>> government agencies and ministries. This will mean that those applying for
>>> KRA online services e.g tax returns and pin certificates will have to apply
>>> for digital certificates before they are allowed to transact.
>>>
>>>
>>> “Internet users have to struggle with a trade-off between convenience
>>> and security. As countries all over the world are making progress in
>>> e-government, all offline activities are being changed into online ones
>>> like e-commerce, e-banking, e-procurement and e-bidding through the
>>> internet. That’s why PKI is so crucial at this time,” said Samsung SDS Vice
>>> President, Sungwon Han.
>>>
>>>
>>>    “Kenya is taking the lead in East Africa,” said Michael Katundu,
>>> Director Information Technology at CCK, who also chairs the Cyber Security
>>> Steering Committee in the region. CCK will be the root certification
>>> authority and will also accredit private companies who will issue
>>> certification to online users on their behalf. Full details of who
>>> qualifies to be an accreditter will be published on CCK website (www.*
>>> cck*.go.ke).
>>>
>>>
>>> Immediate beneficiaries of PKI are those that rely heavily on
>>> e-transactions among them; Banks, Tax bodies (KRA), online businesses and
>>> those that hold sensitive information like Medical service providers, legal
>>> entities and government ministries like the Immigration and Lands.
>>>
>>>
>>> In *2009*, Kenya passed the amendment legislation introducing the
>>> regulation of Electronic Signatures (E-Signature) into the Kenya
>>> Information and Communications Act, *Cap 411A *(as part of
>>> e-transactions).
>>>
>>> Subsequent *subsidiary legislation* to operationalise this framework
>>> was designed in 2010 in the form of Kenya Information and Communications
>>> (Electronic Certification and Domain Name Administration) Regulations, 2010.
>>>
>>>
>>>
>>> *For more information contact pnyambura at ict.go.ke*
>>>
>>>
>>>
>>>
>>>
>>>
>>> --
>>> Phyllis Nyambura
>>> Communication Writer
>>> Kenya ICT Board
>>>
>>> Telposta Towers, 12th Floor, Kenyatta Ave
>>> P.O. Box 27150 - 00100 Nairobi, Kenya
>>> t: + 254-020-2211960/62 | m: + 254 (0) 789396433 | e:
>>> pnyambura at ict.go.ke
>>>
>>> Visit: www.ict.go.ke
>>> Become a fan: www.facebook.com/kenyaictboard
>>> Follow us on twitter: @kenyaICTboard
>>> ---------------------
>>> *Our Vision*: Kenya becomes a top 10 ICT hub
>>> *
>>> Our Mission*: To champion and actively enable Kenya to adopt and
>>> exploit ICT, through promotion of partnerships, investments and
>>> infrastructure growth for socio economic enrichment
>>> *
>>> Our Quality Policy*: Kenya ICT Board is committed to consistently
>>> deliver quality ICT services and manage projects that support the growth of
>>> Information and Communication Technology, to satisfy the needs and
>>> expectations of customers.
>>> Kenya ICT Board shall comply with all requirements and continually
>>> improve the effectiveness of the Quality Management System. Kenya ICT Board
>>> leadership shall establish and review quality objectives in line with this
>>> policy and ensure commitment of all employees.
>>> _______________________________________________
>>> kictanet mailing list
>>> kictanet at lists.kictanet.or.ke
>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>>>
>>> Unsubscribe or change your options at
>>> https://lists.kictanet.or.ke/mailman/options/kictanet/dmuthoni%40gmail.com
>>>
>>>
>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform
>>> for people and institutions interested and involved in ICT policy and
>>> regulation. The network aims to act as a catalyst for reform in the ICT
>>> sector in support of the national aim of ICT enabled growth and development.
>>>
>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors
>>> online that you follow in real life: respect people's times and bandwidth,
>>> share knowledge, don't flame or abuse or personalize, respect privacy, do
>>> not spam, do not market your wares or qualifications.
>>>
>>
>>
>>
>> --
>> Muthoni
>>
>> My Blog: http://rugongo.blogspot.com/
>> --------------------------------------------
>> Mahatma Gandhi once said:-
>>
>> First they ignore you,
>> Then they laugh at you,
>> Then they fight you,
>> AND THEN YOU WIN!!!
>>
>> _______________________________________________
>> kictanet mailing list
>> kictanet at lists.kictanet.or.ke
>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>>
>> Unsubscribe or change your options at
>> https://lists.kictanet.or.ke/mailman/options/kictanet/ikua.evans%40gmail.com
>>
>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform
>> for people and institutions interested and involved in ICT policy and
>> regulation. The network aims to act as a catalyst for reform in the ICT
>> sector in support of the national aim of ICT enabled growth and development.
>>
>> KICTANetiquette : Adhere to the same standards of acceptable behaviors
>> online that you follow in real life: respect people's times and bandwidth,
>> share knowledge, don't flame or abuse or personalize, respect privacy, do
>> not spam, do not market your wares or qualifications.
>>
>
>
>
> --
> *----------------------------------------------------
> Kind Regards,
> Evans Ikua,*
> lanetconsulting.com,
> lpi-eastafrica.org,
> ict-innovation.fossfa.net,
> Skype: @ikuae
> Cell: +254-722-955831
>
> _______________________________________________
> kictanet mailing list
> kictanet at lists.kictanet.or.ke
> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>
> Unsubscribe or change your options at
> https://lists.kictanet.or.ke/mailman/options/kictanet/murigi.muraya%40gmail.com
>
> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform
> for people and institutions interested and involved in ICT policy and
> regulation. The network aims to act as a catalyst for reform in the ICT
> sector in support of the national aim of ICT enabled growth and development.
>
> KICTANetiquette : Adhere to the same standards of acceptable behaviors
> online that you follow in real life: respect people's times and bandwidth,
> share knowledge, don't flame or abuse or personalize, respect privacy, do
> not spam, do not market your wares or qualifications.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.kictanet.or.ke/pipermail/kictanet/attachments/20130321/5ecbae50/attachment.htm>