Kenya Enhances AI Governance to Tackle Cybersecurity Threats

Naivasha:The Kenyan government has emphasized the need for stronger oversight of artificial intelligence (AI) systems, highlighting concerns about the growing use of AI by criminals to execute cyberattacks. These attacks pose risks such as private data breaches and financial losses for organizations.

According to Kenya News Agency, Dr. Sammy Kimunguyi, the Internal Auditor-General at the National Treasury, stressed the importance of maintaining human responsibility in AI adoption. Speaking at the Information Systems Audit and Control Association (ISACA) Kenya chapter conference, Dr. Kimunguyi highlighted the necessity of effective governance, risk management, and cybersecurity to ensure that emerging technologies benefit the public.

Dr. Kimunguyi noted that the Communications Authority reported over eleven billion detected cyber threats in Kenya last year, with criminals increasingly leveraging AI to enhance the sophistication of their attacks. He warned that technologies such as cloned voices and fabricated videos could undermine public trust and lead to significant financial losses, framing cybersecurity as a national security issue.

To combat these threats, the government has established the National Cybersecurity Agency to coordinate the national cybersecurity strategy and protect critical information infrastructure. Dr. Kimunguyi also referenced the Kenya National Artificial Intelligence Strategy 2025-2030, which focuses on areas such as digital infrastructure and innovation, supported by governance and ethics.

The government has enacted the Computer Misuse and Cybercrimes Act to address various cybercrimes, while the Office of the Data Protection Commissioner is developing guidance on AI and privacy. Efforts are underway to expand digital infrastructure, including laying fibre-optic cables and adopting digital servers to secure citizens’ data.

ISACA Kenya Chapter President, Boniface Asiligwa, pointed out that the rapid adoption of AI is outpacing the development of governance frameworks, posing new risks for organizations. He called for robust legal frameworks and urged African countries to create AI technologies and governance systems tailored to local conditions, ensuring human responsibility for outcomes.

The conference, supported by ISACA, served as a platform for diverse stakeholders to collaborate on solutions for responsible AI adoption. ISACA CEO Lyndah Makungu emphasized the organization’s role in supporting professionals through certifications and training in IT governance and cybersecurity.