<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><span></span></div><div>Grace and all<div><br></div><div>This is a pertinent issue in 2018. First let me address this in the context of Policy and Legislation.</div><div><br></div><div>1. In the absence of solid Policy and laws regarding Data Security we are really groping in the dark. I appreciate that there are various initiatives ongoing to remedy this situation. From a personal data security there’s always the issue of who is accessing my data - this needs to be viewed from a personal security angle i.e hackers, unauthorized use of data by corporates, unsolicited communication using data mining tools, government subpoenas etc.</div><div><br></div><div>2. From a Corporate perspective the above is relevant but from a body corporate perspective. This becomes more important considering the magnitude of data some corporates hold and the potential liabilities and losses that can arise through data breaches. For example it is alleged that Kenyan banks lost Kshs.30 billion in the last 3 years. </div><div><br></div><div><a href="https://www.standardmedia.co.ke/business/article/2001232241/how-kenyan-banks-lost-sh30-billion-in-two-years-to-tech-savvy-criminals">https://www.standardmedia.co.ke/business/article/2001232241/how-kenyan-banks-lost-sh30-billion-in-two-years-to-tech-savvy-criminals</a></div><div><br></div><div>3. From a government perspective it takes on a National Security perspective. As the proliferation of Cloud Computing becomes standard operating procedure for most organizations governments are starting to ask pertinent questions about control, access to data etc. One critical issue that is now a major block is the one about Data Sovereignty. In a nutshell the issues around Data Sovereignty can be encapsulated in one sentence.</div><div><br></div><div><span style="background-color: rgba(255, 255, 255, 0);"><b>Data sovereignty</b> comes into play when an organisation's <b>data</b> is stored outside of their country and is subject to the laws of the country in which the <b>data</b> resides. The main concern with <b>data sovereignty</b> is maintaining privacy regulations and keeping foreign countries from being able to subpoena <b>data</b>.</span></div><div><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><div>Bottom line I’d urge us to expedite the building of both hard (roads, bridges, fiber etc) and soft (enabling policy, laws and regulations etc) infrastructure. Soft Infrastructure is not going in tandem with hard Infrastructure. Data Security is a key component of this. Without this in place we cannot expect Tier 4 Data Centre operators to even think about investing in Kenya.</div><div><br></div><div><div id="AppleMailSignature"><div><span style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.294118); -webkit-composition-fill-color: rgba(175, 192, 227, 0.231373);"><b>Ali Hussein</b></span></div><div><br></div><div style="font-family: Helvetica; font-size: medium; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-text-size-adjust: auto; ">+254 0713 601113 </div><div style="font-family: Helvetica; font-size: medium; -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-text-size-adjust: auto; "><br></div><div><p style="margin: 0in 0in 0pt;"><span style="background-color: rgba(255, 255, 255, 0);">Twitter: @AliHKassim</span></p><span style="background-color: rgba(255, 255, 255, 0);"><font></font></span><p style="margin: 0in 0in 0pt;"><span style="background-color: rgba(255, 255, 255, 0);">Skype: abu-jomo</span></p><p style="margin: 0in 0in 0pt;"><span style="background-color: rgba(255, 255, 255, 0);">LinkedIn: <a href="http://ke.linkedin.com/in/alihkassim" target="_blank">http://ke.linkedin.com/in/alihkassim</a><a href="http://ke.linkedin.com/in/alihkassim" target="_blank"><span style="text-decoration: none;"></span></a></span></p><span style="background-color: rgba(255, 255, 255, 0);"><font></font></span><p style="margin: 0in 0in 0pt;"></p><font><span style="background-color: rgba(255, 255, 255, 0);">Blog: <a href="http://www.alyhussein.com/" target="_blank">www.alyhussein.com</a></span><br></font></div><div><span style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.292969); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); "><br></span></div><div>"Discovery consists in seeing what everyone else has seen and thinking what no one else has thought". ~ Albert Szent-Györgyi</div><div><span style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.294118); -webkit-composition-fill-color: rgba(175, 192, 227, 0.231373);"><br></span></div>Sent from my iPad</div><div><br>On 11 Jul 2018, at 7:52 AM, Grace Bomu via kictanet <<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Listers, <br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Thank you to all who contributed to yesterday's topic. The thread is still open for those who may have further thoughts on content regulation. <br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Welcome to Day 2 of online pre KIGF debates where out topic today is <span style="font-size:10pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;font-variant-alternates:normal;font-variant-east-asian:normal;font-variant-numeric:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap" id="m_-4873884615919934799gmail-docs-internal-guid-81d99bd5-84e3-3e7c-252f-95072211e687">Strengthening Data Security in the Context of Emerging Trends</span>. We shall look at cybersecurity in the context of data. <br><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Barely a few weeks ago, social media was awash with memes of Wazir Boniface Chacha, the young man alleged to have conned MPs after getting access to their phone data. Later when this was used as a justification in debates for the Cybercrime Act, some wondered whether the political process had used the Chacha saga to justify the quick passage of a law creating offences. <br><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">But beyond "small data" in our personal possession, many SMEs , corporations, institutions, societies and other bodies are holding significant amounts of data. <br></div><div class="gmail_default" style="font-family:verdana,sans-serif">In this community, the wider issue of cyber security has been a recurring theme in KIGF. It is generally agreed that the best approach is a multi-pronged one that includes the law, good practices, effective mitigation and response to incidences at multiple levels, creation of awareness and technical solutions among others. Having gotten a new law in the form of the Cybercrimes Act, are we assured of data security? <br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Are our existing mechanisms for mitigation and response to incidences adequate for emerging threats?<br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Do we have positive cases or good practices to imitate?<br></div><div class="gmail_default" style="font-family:verdana,sans-serif">What challenges that remain and how can we address them? <br><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Welcome to the discussion. <br clear="all"></div><br>-- <br><div class="m_-4873884615919934799gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Grace Mutung'u <br>Skype: gracebomu<br>@Bomu<br><span style="font-size:12.8px">PGP ID : 0x33A3450F</span><br></div><div><br></div></div></div></div></div></div></div>
</div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>kictanet mailing list</span><br><span><a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a></span><br><span><a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a></span><br><span>Twitter: <a href="http://twitter.com/kictanet">http://twitter.com/kictanet</a></span><br><span>Facebook: <a href="https://www.facebook.com/KICTANet/">https://www.facebook.com/KICTANet/</a></span><br><span>Domain Registration sponsored by <a href="http://www.eacdirectory.co.ke">www.eacdirectory.co.ke</a></span><br><span></span><br><span>Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/info%40campusciti.com">https://lists.kictanet.or.ke/mailman/options/kictanet/info%40campusciti.com</a></span><br><span></span><br><span>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.</span><br><span></span><br><span>KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.</span><br></div></blockquote></div></div></body></html>