<div dir="ltr">Dear Fiona & All<div>Thanks for a great conversation.</div><div>1. On this point: <span style="color:rgb(0,0,153);font-family:Helvetica,Arial,sans-serif;font-size:16px">When liability of network content is placed on the network operator as opposed to the network users what is there to protect the users privacy if the the network operator proceeds to prey in the name of protecting themselves from liability?</span><span style="color:rgb(0,0,153);font-family:Helvetica,Arial,sans-serif;font-size:16px"> - </span> We need legislation protecting intermediaries from liability (intermediary liability legislation) - government is willing to pass this - it has made this promise in the National ICT Masterplan - perhaps Tespok can convene a working group/roundtable on this so that the position comes out well in the Data Protection Law?</div>
<div><br></div><div>2. On reporting about any requests from government, we can perhaps learn from the Trasparency Reports published by a number of tech companies: </div><div>- - <a href="https://www.google.com/transparencyreport/">https://www.google.com/transparencyreport/</a></div>
<div> - <a href="https://transparency.twitter.com/">https://transparency.twitter.com/</a> </div><div>-<a href="http://transparency.verizon.com/us-data">http://transparency.verizon.com/us-data</a> </div><div>- <a href="http://www.microsoft.com/about/corporatecitizenship/en-us/reporting/transparency/">http://www.microsoft.com/about/corporatecitizenship/en-us/reporting/transparency/</a></div>
<div><br></div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><div>Kindest regards,</div><div>Michael M. Murungi<br></div><br></div></div>
<br><br><div class="gmail_quote">On 9 May 2014 12:50, Fiona Asonga via kictanet <span dir="ltr"><<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div style="font-family:arial,helvetica,sans-serif;font-size:10pt;color:#000000"><span style="color:rgb(0,0,153)">Hallo Ali</span><br style="color:rgb(0,0,153)"><br style="color:rgb(0,0,153)"><span style="color:rgb(0,0,153)">Thanks for the interest in the subject matter, kindly find my responses inline:</span><div class="">
<br style="color:rgb(0,0,153)"><br>Fiona Asonga <br>Chief Executive Officer <br>Telecommunications Service Providers Association of Kenya/ Kenya Internet Exchange Point <br>Member Strategic Committee of the Africa Computer Emergency Response Team <br>
<br>NRO Number Council <a href="http://www.nro.net/about/number-council.html" target="_blank">http://www.nro.net/about/number-council.html</a> <br><br>ASO Address Council <a href="http://aso.icann.org/ac/" target="_blank">http://aso.icann.org/ac/</a> <br>
<br><br>14 th Floor, Bruce House <br>Standard Street <br><br>Tel: +254 20 2245 036 <br>Cell: +254 721 713 504 <br><br>Website: <a href="http://www.tespok.or.ke" target="_blank">www.tespok.or.ke</a> <br><br><br><br>“Industry voice in Telecommunications, Providing Policy and Direction <br>
within the Industry and Government” <br><br><br><br></div><div><div class=""><span name="x"></span>
<p class="MsoNormal"><a name="145e0651008d1e80__MailAutoSig"><span style="font-family:"Arial Narrow","sans-serif"">Fiona Asonga <br>
Chief Executive Officer <br>
Telecommunications Service Providers Association of Kenya/ Kenya Internet
Exchange Point <br>
</span></a><span><span style="font-family:"Arial Narrow","sans-serif"">Member Strategic Committee of the Africa Computer Emergency Response Team</span></span></p>
<p class="MsoNormal"><span><em><span style="font-size:9pt;font-family:"Courier New";color:rgb(44,0,255)">NRO Number Council</span></em></span><span><em><span style="font-size:9pt;font-family:"Courier New";color:rgb(44,0,255)"> </span></em></span><span></span><a href="http://www.nro.net/about/number-council.html" target="_blank"><span><em><span style="font-size:9pt;font-family:"Courier New";color:blue">http://www.nro.net/about/number-council.html</span></em></span><span></span></a><span><span style="font-size:13.5pt;font-family:"Verdana","sans-serif";color:black"></span></span></p>
<p class="MsoNormal"><span><em><span style="font-size:9pt;font-family:"Courier New";color:rgb(44,0,255)">ASO Address Council</span></em></span><span><em><span style="font-size:9pt;font-family:"Courier New";color:rgb(44,0,255)"> </span></em></span><span></span><a href="http://aso.icann.org/ac/" target="_blank"><span><em><span style="font-size:9pt;font-family:"Courier New";color:blue">http://aso.icann.org/ac/</span></em></span><span></span></a><span><span style="font-size:13.5pt;font-family:"Verdana","sans-serif";color:black"></span></span></p>
</div><p class="MsoNormal"><span><span> <br>
14<sup>th</sup> Floor, Bruce House <br></span></span></p><div class="">
Standard Street <br>
<br>
Tel: +254 20 2245 036 <br>
Cell: +254 721 713 504 </div><p></p><div class="">
<p class="MsoNormal"><span><span style="font-family:"Arial Narrow","sans-serif"">Website: </span></span><a href="http://www.tespok.or.ke/" target="_blank"><span><span style="font-family:"Arial Narrow","sans-serif";color:blue">www.tespok.or.ke</span></span></a></p>
<p class="MsoNormal"><br><a href="http://www.tespok.or.ke/" target="_blank"><span><span style="font-family:"Arial Narrow","sans-serif";color:blue"></span></span><span></span></a><span><span style="font-family:"Arial Narrow","sans-serif""></span></span></p>
<div style="text-align:center"><span></span><strong><em><span style="font-size:11pt;font-family:"Tw Cen MT","sans-serif";color:rgb(0,64,128)">“Industry voice in Telecommunications, Providing Policy
and Direction </span></em></strong><span style="font-size:11pt;font-family:"Calibri","sans-serif""></span><br><span style="font-size:11pt;font-family:"Calibri","sans-serif"">
</span><strong><em><span style="font-size:11pt;font-family:"Tw Cen MT","sans-serif";color:rgb(0,64,128)">within the Industry and Government”</span></em></strong></div><span name="x"></span><br></div></div>
<hr><div style="color:rgb(0,0,0);font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><b>From: </b>"Ali Hussein" <<a href="mailto:ali@hussein.me.ke" target="_blank">ali@hussein.me.ke</a>><br>
<b>To: </b><a href="mailto:tespok@tespok.co.ke" target="_blank">tespok@tespok.co.ke</a><br><b>Cc: </b>"KICTAnet ICT Policy Discussions" <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>><br>
<b>Sent: </b>Friday, May 9, 2014 11:32:22 AM<div class=""><br><b>Subject: </b>Re: [kictanet] CCK & ISPs to Block of Websites?<br><br></div><div class=""><div>Fiona</div><div><br></div><div>Thanks for speaking out. Appreciated.</div>
<div><br></div><div>May I make some comments/ask some questions?</div><div><br></div><div>We must balance the needs for privacy and national security. Where this country is at the moment we should appreciate the government's fundamental duty of safeguarding citizens' security and the country's infrastructure. Having said that it is also incumbent on the industry to have some transparency as required by our constitution. For avoidance of doubt has the industry:-</div>
<div><br></div></div><div><div class="">1. Received requests to monitor individual email and search activity in Kenya? <br></div><span style="color:rgb(0,0,153)">There has been no request to monitor any individual emails in Kenya. <br>
However, as an industry we have been concerned about certain amendments to the KCA carried out in 2008 that were rather vague giving excessive power to network operators to carry out the above. When liability of network content is placed on the network operator as opposed to the network users what is there to protect the users privacy if the the network operator proceeds to prey in the name of protecting themselves from liability? This is one important issue that we hope will be amended once we have the Data Protection Act in place. <br>
<br></span></div><div class=""><div>2. Is there any report that the industry puts together where we can see:-</div></div><div><div class="">a) Govt request of the above?<br></div><span style="color:rgb(0,0,153)">We are still in the initial process of negotiating the operational framework of how government can work in partnership with private sector. We are yet to receive a request from government. When the requests start coming in we shall document and have a both a public and detailed reports of our operations. <br>
<br></span></div><div><div class="">b) How many were obliged and how many refused? <br></div><span style="color:rgb(0,0,153)">None have come through yet<br><br></span></div><div><div class="">3. Cyber security breaches and how they were dealt with? <br>
</div><span style="color:rgb(0,0,153)">From our reports on the usalama site you will notice that the cyber security breaches numbers vary depending on the type of threat, source and country out of which attack is stemming from. We have presented the reports as per month and quarter with all the breached we observed. <br>
On dealing with the security breaches: <br>TESPOK has a 24/7/365 monitoring system that send alerts based on the threat priority to the TESPOK technical team. Then we begin to engage the ISP<br>1st point of contact is the respective ISP security staff whom we contact with breach details and recommendations and give them time to remedy situation.<br>
2nd point of contact is the Network/IT head to report the status from our end<br>3rd point of contact is the CEO of the respective ISP if his team is unable to remedy situation, we request permission to assist resolve the breach at no extra cost to the ISPs. We also provide the CEO all the information they require about the breach in the event that the public need to be informed. In the last one year we have had 2 major breaches that saw us follow this process and introduce engagement with Kenya Bankers Association due to the financial institutions that were at risk. <br>
We are working on a program for the financial sector that will be deployed as soon as Kenya Bankers Association have finalized implementation issues at their end.<br></span></div><div><br></div><div><div class="">Kenya is at the top of Internet freedom worldwide. We must temper this freedom with responsibility. Its a fine balance and requires both the private sector, non-governmental players and the government itself to work in tandem to ensure this freedom is not abused.<br>
</div><span style="color:rgb(0,0,153)">I couldn't have put it better, online security is a space we all need to participate in a stakeholders of the shared platform.</span><br></div><div><div class="h5"><div><br></div>
<div>On the part of Government, we must urge them that while they ensure and safeguard our borders both within and without they must do it within the purviews of humanity and decency - after all that is what differentiates us from those who seek to destroy what we hold dear. </div>
<div><br><br><div><span><b>Ali Hussein</b></span></div><div><br></div><div style="font-family:Helvetica;font-size:medium">+254 770 906375 / 0713 601113</div><div style="font-family:Helvetica;font-size:medium"><br></div><div>
<p style="margin:0in 0in 0pt"><span>Twitter: @AliHKassim</span></p><span><font></font></span><p style="margin:0in 0in 0pt"><span>Skype: abu-jomo</span></p><p style="margin:0in 0in 0pt"><span>LinkedIn: <a href="http://ke.linkedin.com/in/alihkassim" target="_blank">http://ke.linkedin.com/in/alihkassim</a><a href="http://ke.linkedin.com/in/alihkassim" target="_blank"><span style="text-decoration:none"></span></a></span></p>
<span><font></font></span><p style="margin:0in 0in 0pt"></p><font><span>Blog: <a href="http://www.alyhussein.com/" target="_blank">www.alyhussein.com</a></span><br></font></div><div><span><br></span></div><div>"I fear the day technology will surpass human interaction. The world will have a generation of idiots". ~ Albert Einstein</div>
<div><span><br></span></div>Sent from my iPad</div><div><br>On May 9, 2014, at 9:02 AM, "Fiona Asonga" <<a href="mailto:tespok@tespok.co.ke" target="_blank">tespok@tespok.co.ke</a>> wrote:<br><br></div></div>
</div><blockquote><div><div><div class="h5"><span>Hallo Listers,</span><br><span></span><br><span>TESPOK the umbrella body for service providers that runs the KIXP has taken time to follow up on the posts in the preceding emails. </span><br>
<span></span><br><span>TESPOK as the industry body for service providers has been running a Computer Security Incident Response Team since 2009. We have realtime user access to for service providers to view auto-generated reports of their network status. CCK has been working with TESPOK since 2011 to ensure network integrity for the safety of Internet users. The working arrangements places TESPOK as the face of the ISPs in as far as CCK and cyber security is concerned. We are unable to confirm any requests to block websites or blogs, however ISPs have been requested by both TESPOK and CCK to have dedicated Network Security staff. </span><br>
<span></span><br><span>It is my view that the request to engage may have been mis-understood or mis-communicated. KIXP is dependent on content and it would be counter productive for TESPOK to support blocking of websites thus reducing content access at the KIXP.</span><br>
<span></span><br><span>In the event that we note changes to our mode of engagement with CCK in a manner to negatively impact on the end users' experience we shall not hesitate to speak up. For more details on our cyber security program kindly visit <a href="http://www.cyberusalama.co.ke" target="_blank">www.cyberusalama.co.ke</a> or <a href="http://www.usalama.co.ke" target="_blank">www.usalama.co.ke</a></span><br>
<span></span><br><span>kind regards</span><br><span></span><br><span></span><br><span>Fiona Asonga </span><br><span>Chief Executive Officer </span><br><span>Telecommunications Service Providers Association of Kenya/ Kenya Internet Exchange Point </span><br>
<span>Member Strategic Committee of the Africa Computer Emergency Response Team </span><br><span></span><br><span>NRO Number Council <a href="http://www.nro.net/about/number-council.html" target="_blank">http://www.nro.net/about/number-council.html</a> </span><br>
<span></span><br><span>ASO Address Council <a href="http://aso.icann.org/ac/" target="_blank">http://aso.icann.org/ac/</a> </span><br><span></span><br><span></span><br><span>14 th Floor, Bruce House </span><br><span>Standard Street </span><br>
<span></span><br><span>Tel: +254 20 2245 036 </span><br><span>Cell: +254 721 713 504 </span><br><span></span><br><span>Website: <a href="http://www.tespok.or.ke" target="_blank">www.tespok.or.ke</a> </span><br><span></span><br>
<span></span><br><span></span><br><span>“Industry voice in Telecommunications, Providing Policy and Direction </span><br><span>within the Industry and Government” </span><br><span></span><br></div></div><span><hr></span><div>
<div class="h5"><br><span>From: "Ali Hussein via kictanet" <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>></span><br><span>To: <a href="mailto:tespok@tespok.co.ke" target="_blank">tespok@tespok.co.ke</a></span><br>
<span>Sent: Wednesday, May 7, 2014 2:16:25 PM</span><br><span>Subject: Re: [kictanet] CCK & ISPs to Block of Websites?</span><br><span></span><br><span></span><br><span></span><br><span>Wash & all </span><br><span></span><br>
<span></span><br><span>Its not the blocking that worries me. It's the big brother syndrome that concerns me. That Govts worldwide have this syndrome is a foregone conclusion. The ones who are not in the news just haven't been caught yet or are openly doing it - China, Russia, Middle East countries etc. </span><br>
<span></span><br><span></span><br><span>Ali Hussein </span><br><span></span><br><span></span><br><span>+254 770 906375 / 0713 601113 </span><br><span></span><br><span></span><br><span></span><br><span></span><br><span>Twitter: @AliHKassim </span><br>
<span></span><br><span>Skype: abu-jomo </span><br><span></span><br><span>LinkedIn: <a href="http://ke.linkedin.com/in/alihkassim" target="_blank">http://ke.linkedin.com/in/alihkassim</a> </span><br><span></span><br><span>Blog: <a href="http://www.alyhussein.com" target="_blank">www.alyhussein.com</a> </span><br>
<span></span><br><span></span><br><span></span><br><span>"I fear the day technology will surpass human interaction. The world will have a generation of idiots". ~ Albert Einstein </span><br><span></span><br><span>Sent from my iPad </span><br>
<span></span><br><span>On May 7, 2014, at 1:21 PM, Odhiambo Washington via kictanet < <a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a> > wrote: </span><br><span></span><br>
<span></span><br><span></span><br><span></span><br><span></span><br><span>I think it's not going to be easy to block web content unless the govt buys the equipment the ISPs need for this purpose - content filtering. You can block a website, but it's another game altogether to block the content. Content can be moved very easily to other hosts. Plus, it's gonna be futile, because that very content will be shared on Social Media the moment the govt opens its mouth:) You know that once it's in social media, it's not just a website anymore we're talking about. </span><br>
<span></span><br><span></span><br><span></span><br><span></span><br><span>So, IMHO, I believe the govt will NOT be doing this. </span><br><span></span><br><span></span><br><span>Victor, is there a law that allows the govt or it's agents to block web content? What are the provisions within that law, and are those provisions violated by those websites. </span><br>
<span></span><br><span></span><br><span></span><br><span></span><br><span></span><br><span>On 5 May 2014 21:23, Victor Kapiyo via kictanet < <a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a> > wrote: </span><br>
<span></span><br><span></span><br><span></span><br><span></span><br><span>Dear listers, </span><br><span></span><br><span>I came across this tweet earlier today. I'm not sure of the legitimacy of the claim, but could someone from CCK, any ISP or lister respond to the allegations / shed more light on this? </span><br>
<span></span><br><span></span><br><span>Tweet from Robert Alai (@RobertAlai) </span><br><span></span><br><span>Robert Alai (@RobertAlai) tweeted at 1:22 PM on Mon, May 05, 2014: </span><br><span></span><br><span>Now the govt through CCK wants ISPs to block some 15 websites and blogs critical of the government. </span><br>
<span></span><br><span>( <a href="https://twitter.com/RobertAlai/status/463262331695550464" target="_blank">https://twitter.com/RobertAlai/status/463262331695550464</a> ) </span><br><span></span><br><span>Victor </span><br>
<span>_______________________________________________ </span><br><span>kictanet mailing list </span><br><span><a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a> </span><br><span><a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a> </span><br>
<span></span><br><span>Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/odhiambo%40gmail.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/odhiambo%40gmail.com</a> </span><br>
<span></span><br><span>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. </span><br>
<span></span><br><span>KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. </span><br>
<span></span><br><span></span><br><span></span><br><span></span><br><span>-- </span><br><span>Best regards, </span><br><span>Odhiambo WASHINGTON, </span><br><span>Nairobi,KE </span><br><span>+254733744121/+254722743223 </span><br>
<span>"I can't hear you -- I'm using the scrambler." </span><br><span></span><br><span></span><br><span></span><br><span>_______________________________________________ </span><br><span>kictanet mailing list </span><br>
<span><a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a> </span><br><span><a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a> </span><br>
<span></span><br><span>Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com</a> </span><br>
<span></span><br><span>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. </span><br>
<span></span><br><span>KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. </span><br>
<span>_______________________________________________</span><br><span>kictanet mailing list</span><br><span><a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a></span><br><span><a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a></span><br>
<span></span><br><span>Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/tespok%40tespok.co.ke" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/tespok%40tespok.co.ke</a></span><br>
<span></span><br><span>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.</span><br>
<span></span><br><span>KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.</span><br>
</div></div></div></blockquote></div><br></div>
<br><br></div><br>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/michaelmurungi%40gmail.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/michaelmurungi%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
</blockquote></div><br></div></div>