<div dir="ltr">Valid reasoning, but if this were in Mars, and there were no people, you would come next year and find your bank vault open, and all the currency intact. Money doesn't steal itself. </div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Dec 2, 2016 at 9:56 AM, Waithaka Ngigi <span dir="ltr"><<a href="mailto:ngigi@at.co.ke" target="_blank">ngigi@at.co.ke</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="en-US" style="background-color:rgb(255,255,255);line-height:initial"> <div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Colins,</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">There's a reason Banks have very well secured vaults.</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">You can't put Billions of Shillings, right outside CBK, then ask GSU to take a break and expect to find the money there after a couple of hours.</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Leaving IFMIS without any credible security is akin to opening CBKs vaults on Friday and then coming back on Monday to find it empty and then you blame people, people, people!</div><span class=""> <div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br style="display:initial"></div> <div style="font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Waithaka Ngigi<br><br>Alliance Technologies<br><a href="http://www.at.co.ke" target="_blank">www.at.co.ke</a> </div> </span><table width="100%" style="background-color:white;border-spacing:0px"> <tbody><tr><td colspan="2" style="font-size:initial;text-align:initial;background-color:rgb(255,255,255)"> <div style="border-style:solid none none;border-top-color:rgb(181,196,223);border-top-width:1pt;padding:3pt 0in 0in;font-family:Tahoma,'BB Alpha Sans','Slate Pro';font-size:10pt"> <div><b>From: </b>Collins Areba</div><div><b>Sent: </b>Friday, December 2, 2016 9:50 AM</div><span class=""><div><b>To: </b>KICTAnet ICT Policy Discussions</div></span><div><b>Cc: </b>Waithaka Ngigi</div><div><b>Subject: </b>Re: [kictanet] KISERO: Kenya’s corruption tsars have perfected looting through Ifmis - Daily Nation</div></div></td></tr></tbody></table><div><div class="h5"><div style="border-style:solid none none;border-top-color:rgb(186,188,209);border-top-width:1pt;font-size:initial;text-align:initial;background-color:rgb(255,255,255)"></div><br><div id="m_7400693317953889576_originalContent"><p dir="ltr">Dead wrong Waithaka. </p>
<p dir="ltr">Its always People people people!</p>
<p dir="ltr">Even the best designed systems assume a certain minimum threshold of human order and decency. </p>
<p dir="ltr">When the first order of business when a system is implemented is a discussion to brainstorm how to "beat the system", we are way below that threshold.</p>
<div class="gmail_extra"><br><div class="gmail_quote">On 2 Dec 2016 09:45, "Waithaka Ngigi via kictanet" <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><wbr>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto" lang="en-US" style="background-color:rgb(255,255,255);line-height:initial"> <div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Ali,</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">It's also time to put professional blame squarely where it lies.</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Any system tasked with moving *huge* sums of money and that does not come with at least Two-Factor authentication be *default* is either:</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">1. A very, very bad implementation</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">2. Intentionally left unsecure to allow looting.</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Blaming users & ethics in our users is just looking for scapegoats. Citibank, Stanchart & other Financial Institutions do not rely on user ethics when using their online banking platforms. You key in your password, for every transaction, you confirm using your 2FA Code, ensuring it's only you, or someone you gave your physical 2FA card that can authenticate that transaction.</div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">And that's before you put in anti-laundering functionality, which should catch most of those transactions dead in their tracks if well implemented. E.g before payment of sums above KSH 100m cross-check on company registration date, if less than 1 year, flag! Common addresses, Directors btn different firms.</div> <div style="width:100%;font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div> <div style="font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Online payments in Kenya have been with us since the early 2000s, why is it we've never heard complaints from the Banks that billions are being lost through basic identity fraud similar to IFMIS. </div><div style="font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Don't blame the Kenyan people, blame lies squarely with the Systems we have put in place. </div><div style="font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)"><br></div><div style="font-size:initial;font-family:Calibri,'Slate Pro',sans-serif,sans-serif;color:rgb(31,73,125);text-align:initial;background-color:rgb(255,255,255)">Waithaka Ngigi<br><br>Alliance Technologies<br><a href="http://www.at.co.ke" target="_blank">www.at.co.ke</a> </div> <table width="100%" style="background-color:white;border-spacing:0px"> <tbody><tr><td colspan="2" style="font-size:initial;text-align:initial;background-color:rgb(255,255,255)"> <div style="border-style:solid none none;border-top-color:rgb(181,196,223);border-top-width:1pt;padding:3pt 0in 0in;font-family:Tahoma,'BB Alpha Sans','Slate Pro';font-size:10pt"> <div><b>From: </b>Ali Hussein via kictanet</div><div><b>Sent: </b>Friday, December 2, 2016 5:33 AM</div><div><b>To: </b>Ngigi Waithaka</div><div><b>Reply To: </b>KICTAnet ICT Policy Discussions</div><div><b>Cc: </b>Ali Hussein</div><div><b>Subject: </b>[kictanet] KISERO: Kenya’s corruption tsars have perfected looting through Ifmis - Daily Nation</div></div></td></tr></tbody></table><div style="border-style:solid none none;border-top-color:rgb(186,188,209);border-top-width:1pt;font-size:initial;text-align:initial;background-color:rgb(255,255,255)"></div><br><div id="m_7400693317953889576m_-2358265015390585767_originalContent"><div><span></span></div><div><div>Listers</div><div><br></div><div>Related to to the discussion of 'reigning in' quacks in the ICT Sector how do you explain the fiasco that is IFMIS? </div><div><br></div><div>Except from the article:-</div><div><br></div><div><div><p style="margin:0px 0px 15.600000000000001px;line-height:25px"><span style="background-color:rgba(255,255,255,0)">In theory, the Ifmis system we have is based on Oracle E-Business Suite, an accounting package developed by Oracle of the USA. In reality, what is in place is a product of conspiracies between crafty government officials and local rent-seeking software merchants.</span></p></div><div><p style="margin:0px 0px 15.600000000000001px;line-height:25px"><span style="background-color:rgba(255,255,255,0)">Through highly inflated and ill-conceived customisation and re-engineering projects, the merchants have colluded with public officials to create a mongrel of the original Oracle E-Business Suite.</span></p></div><div><p style="margin:0px 0px 15.600000000000001px;line-height:25px"><span style="background-color:rgba(255,255,255,0)">This is the system at the heart of corruption in the public sector.</span></p></div></div><div><a href="http://www.nation.co.ke/oped/Opinion/Kenya-corruption-tsars-have-perfected-looting-through-Ifmis/440808-3469632-kg5rbv/" target="_blank">http://www.nation.co.ke/oped/O<wbr>pinion/Kenya-corruption-tsars-<wbr>have-perfected-looting-through<wbr>-Ifmis/440808-3469632-kg5rbv/</a></div><div><br></div><div id="m_7400693317953889576m_-2358265015390585767AppleMailSignature">So if we were to talk this discussion a step further:-</div><div id="m_7400693317953889576m_-2358265015390585767AppleMailSignature"><br></div><div id="m_7400693317953889576m_-2358265015390585767AppleMailSignature">1. The customization of an Oracle E-Business Suite cannot be done by a 'quack' who isn't a Certified Oracle Software Engineer.</div><div id="m_7400693317953889576m_-2358265015390585767AppleMailSignature"><br></div><div id="m_7400693317953889576m_-2358265015390585767AppleMailSignature">2. The customization must be approved by the client and mapped with the business processes mutually agreed by the vendor and the customer. In this case the government.</div><div id="m_7400693317953889576m_-2358265015390585767AppleMailSignature"><br></div><div id="m_7400693317953889576m_-2358265015390585767AppleMailSignature">A pig is a pig even if you apply lipstick on it. Let's call this what it is - Corruption. Period. Perpetuated in this case by the client and using qualified IT Professionals. We in the industry must call out the ones who collude to fleece this country instead of chasing a red herring in the name of 'quacks'!</div><div id="m_7400693317953889576m_-2358265015390585767AppleMailSignature"><br><div><span><b>Ali Hussein</b></span></div><div><span><b>Principal</b></span></div><div><b style="background-color:rgba(255,255,255,0)">Hussein & Associates</b></div><div style="font-family:Helvetica;font-size:medium">+254 0713 601113 </div><div style="font-family:Helvetica;font-size:medium"><br></div><div><p style="margin:0in 0in 0pt"><span style="background-color:rgba(255,255,255,0)">Twitter: @AliHKassim</span></p><span style="background-color:rgba(255,255,255,0)"><font></font></span><p style="margin:0in 0in 0pt"><span style="background-color:rgba(255,255,255,0)">Skype: abu-jomo</span></p><p style="margin:0in 0in 0pt"><span style="background-color:rgba(255,255,255,0)">LinkedIn: <a href="http://ke.linkedin.com/in/alihkassim" target="_blank">http://ke.linkedin.c<wbr>om/in/alihkassim</a></span></p><font><br></font></div><div><span><br></span></div><div>"Discovery consists in seeing what everyone else has seen and thinking what no one else has thought". ~ Albert Szent-Györgyi</div><div><span><br></span></div>Sent from my iPad</div></div><br></div></div>
<br>______________________________<wbr>_________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/m<wbr>ailman/listinfo/kictanet</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/arebacollins%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/m<wbr>ailman/options/kictanet/arebac<wbr>ollins%40gmail.com</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br></blockquote></div></div>
<br></div></div></div></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div><div><div><div>Regards, <br><br></div>Collins Areba, </div></div></div><div>Kilifi, Kenya.</div><div>Tel: +<b><font color="#38761d">254 707 750 788 </font></b>/ <b><font color="#ff0000">0731534124</font></b><br>Twitter: @arebacollins.<br></div></div>Skype: arebacollins<br></div></div></div></div>
</div>