<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Rockwell;
panose-1:2 6 6 3 2 2 5 2 4 3;}
@font-face
{font-family:Times;
panose-1:2 2 6 3 5 4 5 2 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-CA link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Friends<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>This matter underlines a key aspect that should trigger comprehensive assessment of the way critical infrastructure is managed in this country. As the Treasury indicated a while back, Safaricom’s role and especially its MPESA service is a critical cog in the Kenyan economy. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>A while back there was a task force dealing with regulations to govern critical infrastructure to ensure that this is protected accordingly. This would require designs that assure resilience in the face of potential vulnerabilities (both logical and physical) with continuity at the core of these.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I suppose that Safaricom continually assesses (through audits and self-assessment) its vulnerabilities, examines associated exposures and potential impacts with clear action plans on how to address those weaknesses. … I am sure the regulator seeks the same from an assurance perspective as part of the entity’s licensing requirements.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Without thinking of the worst: cyber-related risks abound too!<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Regards.<o:p></o:p></p><p class=MsoNormal style='background:white'><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'>----------------------------------------------------------------------------------------------</span><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'>------------</span><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'><br>Matunda Nyanchama, PhD, CISSP; Director & Managing Consultant, <a href="mailto:mnyanchama@aganoconsulting.com"><span style='color:blue'>mnyanchama@aganoconsulting.com</span></a></span><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'><o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'>Agano Consulting Inc.; </span><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'><a href="http://www.aganoconsulting.com/" target="_blank"><span style='color:#196AD4'>www.aganoconsulting.com</span></a>; Twitter: <a href="http://twitter.com/#%21/nmatunda" target="_blank"><span style='color:#366388'>nmatunda; </span></a>Skype: okiambe</span><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'><br>-----------------------------------------------------------------------------------------------------------</span><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'><o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'>Manage your ICT risks! We are the experts you need! The trusted partners you deserve!<o:p></o:p></span></p><p class=MsoNormal style='background:white'><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'>Call: <b> +254-20-267-0743 (Kenya) </b>or <b><u><span style='color:#196AD4'>info@aganoconsulting.com</span></u></b></span><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:black;mso-fareast-language:EN-CA'><o:p></o:p></span></p><p class=MsoNormal style='background:white'><b><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:blue;mso-fareast-language:EN-CA'>Licensed by Communications Authority of Kenya (CA)</span></b><span style='font-size:10.0pt;font-family:"Rockwell",serif;color:blue;mso-fareast-language:EN-CA'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>