Cybersecurity is no longer an IT problem; it is a balance-sheet risk

Kenya’s digital economy is growing quickly, leaving businesses increasingly exposed to cyber threats. The Communications Authority of Kenya recorded 11.12 billion detected cyber-threat events in the financial year ended June 2026, up 29% year on year, though the figures do not necessarily represent confirmed attacks. Kris Mbaya warns that ransomware and data breaches can disrupt operations, expose sensitive information and erode trust; Kenya’s 2019 Data Protection Act requires certain breaches to be reported to the data protection commissioner within 72 hours. Businesses should strengthen access controls, backups and staff training, and prepare financially for incidents, including through cyber liability insurance.