Cybersecurity Knowledge
Built for Africa.

Comprehensive guide covering ODPC registration, lawful bases for processing, all nine data subject rights, DPO obligations, breach notification, cross-border transfer rules, enforcement penalties, and a practical compliance checklist. Essential reading for compliance officers, legal teams, and IT leaders operating in Kenya.

Step-by-step guide to implementing ISO 27001:2022 — covering gap analysis, ISMS scope definition, risk assessment methodology, Statement of Applicability, all four control themes, mandatory documentation, internal audit, and the certification audit process. Includes realistic timeline and budget guidance for East African organisations.

How to design and run a security awareness programme that genuinely changes employee behaviour. Covers month-by-month planning, phishing simulation methodology, departmental deep dives, the Security Champions model, and key performance indicators. All examples are grounded in the East African threat landscape.

A practical guide to conducting structured cybersecurity risk assessments — from asset inventory and threat identification through likelihood/impact scoring, risk treatment options, and maintaining your risk register. Includes a dedicated section on translating technical risk into financial language for board-level reporting.