Discussion: Shaping Kenya’s Cybersecurity Ecosystem
On 15/08/2024 20.49, Benson Muite via KICTANet wrote:
> On 15/08/2024 12.54, Adam Lane via KICTANet wrote:
>> Hi David
>>
>> In my engagements with policy makers I emphasize the need for the
>> government to intentionally identify relevant cybersecurity standards
>> (either international, local or international ones that are localized)
>> and then implement them within government and encourage the rest of the
>> industry in the country to also adopt and implement. These standards are
>> a good benchmark to define “secure” (though one must never accept
>> reaching a standard as the end goal and not get complacent) and can be
>> specific to certain areas (such as cloud, telcom networks, software etc)
>> or be about certain processes and can be tested and certified against.
>> This can grow the cybersecurity ecosystem (labs, certifiers, standards
>> consultants etc) and support talent training and development as well.
>>
>>
>>
>> Such standards may not need to be legally required necessarily, but this
>> would be a discussion worth having.
>
> Probably more effort is required in keeping upto date with international
> standards and perhaps influencing their development. As an example,
> many of the laws are available as pdf only downloads from kenyalaw.org.
> County legislation is more difficult to obtain. Standards such as Akoma
> Ntoso [1] would make searching legislative documents much easier, and in
> particular improve hyperlinks in web versions. This would aid people
> doing dissemination work to be more effective.
>
>
> 1) en.wikipedia.org/wiki/Akoma_Ntoso
>>
>>
> On 15/08/2024 12.54, Adam Lane via KICTANet wrote:
>> Hi David
>>
>> In my engagements with policy makers I emphasize the need for the
>> government to intentionally identify relevant cybersecurity standards
>> (either international, local or international ones that are localized)
>> and then implement them within government and encourage the rest of the
>> industry in the country to also adopt and implement. These standards are
>> a good benchmark to define “secure” (though one must never accept
>> reaching a standard as the end goal and not get complacent) and can be
>> specific to certain areas (such as cloud, telcom networks, software etc)
>> or be about certain processes and can be tested and certified against.
>> This can grow the cybersecurity ecosystem (labs, certifiers, standards
>> consultants etc) and support talent training and development as well.
>>
>>
>>
>> Such standards may not need to be legally required necessarily, but this
>> would be a discussion worth having.
>
> Probably more effort is required in keeping upto date with international
> standards and perhaps influencing their development. As an example,
> many of the laws are available as pdf only downloads from kenyalaw.org.
> County legislation is more difficult to obtain. Standards such as Akoma
> Ntoso [1] would make searching legislative documents much easier, and in
> particular improve hyperlinks in web versions. This would aid people
> doing dissemination work to be more effective.
>
>
> 1) en.wikipedia.org/wiki/Akoma_Ntoso
>>
>>
There are some efforts from South Africa in typesetting legal documents.
These are being used in Kenya:
laws.africa/case-studies/kenyalaw.html
However, I cannot find the XML online, this would enable much easier
creation of searchable webpages such as:
bkmgit.codeberg.page/CMCA2018/
HTML is available for many bills though:
kenyalaw.org:8181/exist/kenyalex/index.xql
There seems to be an example of marking up parliamentary debate:
docs.oasis-open.org/legaldocml/akn-core/v1.0/os/part2-specs/examples/
which would also be very helpful for automated analysis, for example to
get notifications whenever a particular representative makes a
contribution to a debate