Consumer Cybersecurity Awareness Key in Addressing Online Vulnerabilities

Lack of cybersecurity awareness among consumers remains the most significant threat in an increasingly digital world, as are all the potential vulnerabilities for businesses and personal information. 

That was the clarion call during the Safer Internet Day organized by the Communications Authority of Kenya (CA) on 11th February 2025, during which speakers emphasized that consumer awareness empowers individuals to protect their personal information online, reducing the risk of identity theft, financial fraud, and other cybercrimes. 

Since users are frequently the weakest link in the defense chain, the fundamental problem is that many customers lack sufficient knowledge about cybersecurity best practices and the threats they face. This leaves businesses with a serious security gap. 

It is anticipated that initiatives to increase cybersecurity knowledge will greatly lower occurrences caused by human error. These vulnerabilities should decrease when customers embrace technology like multi-factor authentication and safe passwords and grow more accustomed to recommended practices. 

ICT Cabinet Secretary Hon. William Kabogo said the government is keen on fostering a safe, inclusive, and secure digital environment for all citizens.

‘‘As we embrace the boundless opportunities presented by the digital age, let us also remain vigilant in addressing its challenges. The Kenyan government is committed to working hand in hand with all stakeholders to build a safe, secure, and inclusive digital future for every citizen,’’ said CS Kabogo who was represented by Prof. Edward Kisiang’ani, the Principal Secretary, State Department for Broadcasting and Telecommunications during the Safer Internet Day on Tuesday.

The CS cited some of the progressive initiatives by the government in enabling a safer Internet ecosystem, including the National Cybersecurity Strategy, the Kenya National Digital Master Plan (2022-2032), National Plan of Action to Tackle Online Child Sexual Exploitation and Abuse (2022–2026), the Computer Misuse and Cybercrimes Act, 2018, the review of the Children Act (2022) as well as the Child Online Protection (COP) programme spearheaded by Communications Authority of Kenya (CA). 

‘‘Together, we can make the internet a place of empowerment, opportunity, and growth—a space where every Kenyan can thrive without fear or compromise,’’ observed the CS. 

According to the CA Director General Mr. David Mugonyi, as the country moves more social and economic activities into the digital arena, the more attractive it becomes to cyber criminals, and as such, underscoring the need for continual awareness on the risks that abound on the Internet. 

“Consumer education is not a luxury or an afterthought but a core activity for all stakeholders. This is the only way that our digital world will thrive,” said Mr. Mugonyi. 

He added that emerging technologies such as artificial intelligence (AI) are complicating matters. “With generative AI, fraudsters can create more credible-looking content and with machine learning and automation, they can develop malware and viruses that adapt to system defenses.” he added. 

In the last financial year, the National KE-CIRT detected 3.5 billion cyber threats targeting Kenya's cyberspace. In the past six months alone, 1.5 billion such threats were detected. Besides internal initiatives, Mr. Mugonyi emphasized that companies must collaborate with government entities and international organizations to promote security standards and best practices. This collective effort not only protects consumers but also strengthens cybersecurity infrastructure on both national and global levels. 

Recent massive data breach scandals, paired with the explosion of artificial intelligence and deepfake technologies, have dramatically changed the digital trust landscape. 

Critically, the same technological advancements driving business narratives in the past years are also empowering bad actors to overcome existing defences.

The Authority hosted the event in collaboration with other ICT industry players, to forge a united front towards a safer Internet. Dr. Fiona Asonga who is the Chief Executive Officer of the Technology Service Providers of Kenya (TESPOK), spoke about the power of partnerships in capacity building, with TESPOK working with schools to support ICT clubs where cyber etiquette can be imparted to learners in their formative years. 

During the event, Google shared about its various tools it has developed to enhance online safety, including Family Link, which gives parents the technical skills to build safe Internet use for their children. Google also currently runs The Experience AI, an experiential programme to train youths on AI safety. 

For Mr. Michael Muriungi, the Governance and Policy Lead at Google, the evolving nature of Artificial Intelligence, ‘‘presents the most profound shift in our lives." 

META, the global tech company has in place over 30 tools to promote a safe Internet environment, including mitigation of fraud and child exploitation over the platform, according to Ms. Mercy Ndegwa, the Director of Public Policy, East and Horn of Africa at META.