April 2015 - KICTANet

Re: [kictanet] Invittaion to IANA stewardship Transition and Enhancing ICANN Accountability meeting
by Mwendwa Kivuva 22 Apr '15

22 Apr '15

Greetings All, >From the feedback we have received, the IANA stewardship Transition and Enhancing ICANN Accountability Forum has been rescheduled as follows Date: Thursday, 30th April 2015. Time: 2.00PM Venue: Nairobi Safari Club, University Way. Please continue giving feedback using this short survey here, and also share it with your networks: https://www.surveymonkey.com/s/NXSQ7FG Sincerely, ______________________ Mwendwa Kivuva, Nairobi, Kenya "There are some men who lift the age they inhabit, till all men walk on higher ground in that lifetime." - Maxwell Anderson On 22 April 2015 at 12:29, Mwendwa Kivuva <Kivuva(a)transworldafrica.com> wrote: > Dear all, > > > > The Kenyan Internet community will hold a consultative forum at the > Nairobi Safari Club (Lillian Towers), University Way, on Friday 24th > April 2015 from 2PM on the IANA Functions Stewardship Transition from NTIA > to the global multistakeholder community, and Enhancing ICANN > Accountability. > > > > This email is to invite you to the event, and also solicit comments and > feedback from the Kenya community from those who cannot attend the face to > face meeting on the transition of the IANA functions stewardship role from > the US Government. > > > > Please give feedback using this short survey here, and also share it with > your networks: https://www.surveymonkey.com/s/NXSQ7FG > > > > For those attending the meeting, Please RSVP for logistics purposes. > > > > NB: Parking can be accessed at the Nairobi Safari club parking opposite > Uchumi Supermarket (former Kengeles Grounds) > > > > BACKGROUND > > On 14th March 2014, the U.S. Government announced its intent to transition > its stewardship of the IANA functions to the global multistakeholder > community: > http://www.ntia.doc.gov/press-release/2014/ntia-announces-intent-transition… > . > > Following this announcement, ICANN, was tasked with facilitating the > development of a global, and representative proposal based on the following > principles: > > > > 1. Support and enhance the multistakeholder model; > > 2. Maintain the security, stability, and resiliency of the Internet > DNS; > > 3. Meet the needs and expectation of the global customers and > partners of the IANA services; > > 4. Maintain the openness of the Internet. > > 5. The proposal must not replace the NTIA role with a > government-led or an inter-governmental organization solution. > > > > The IANA Stewardship Transition Coordination Group (ICG) was formed in > July 2014 (https://www.icann.org/en/stewardship) and tasked with > assembling and delivering a proposal to NTIA through the ICANN Board. The > ICG constituted three special interest groups representing the Domain Names > community (NRO members), Numbering Resources community (CWG), and the > Protocol Parameters community (IETF), > > > > ICG shall compile the proposals from the three communities into a single > proposal which the ICG shall submit to the board for review, and the board > shall forward the final proposal to NTIA. > > > > The three communities affected by IANA functions, IETF (handling protocol > parameters), Numbering community - CRISP Team (under the umbrella of NRO), > and Domain Names community (Cross Community Working Group) have released > proposals on how the IANA transition should be handles. > > Number resource process and proposal can be found here: > https://www.nro.net/nro-and-internet-governance/iana-oversight/consolidated… > > IETF process and proposal can be found here: > https://www.ietf.org/iana-transition.html > > Domain names community process and proposal can be found here: > https://community.icann.org/display/gnsocwgdtstwrdshp/CWG+to+Develop+an+IAN… > > > > > Sincerely, > > > Mwendwa Kivuva > Consolidated Regional Internet Registries IANA Stewardship Proposal > (CRISP) Team member - Representing AFRINIC region. >

3 2

Invittaion to IANA stewardship Transition and Enhancing ICANN Accountability meeting
by Mwendwa Kivuva 22 Apr '15

22 Apr '15

Dear all, The Kenyan Internet community will hold a consultative forum at the Nairobi Safari Club (Lillian Towers), University Way, on Friday 24th April 2015 from 2PM on the IANA Functions Stewardship Transition from NTIA to the global multistakeholder community, and Enhancing ICANN Accountability. This email is to invite you to the event, and also solicit comments and feedback from the Kenya community from those who cannot attend the face to face meeting on the transition of the IANA functions stewardship role from the US Government. Please give feedback using this short survey here, and also share it with your networks: https://www.surveymonkey.com/s/NXSQ7FG For those attending the meeting, Please RSVP for logistics purposes. NB: Parking can be accessed at the Nairobi Safari club parking opposite Uchumi Supermarket (former Kengeles Grounds) BACKGROUND On 14th March 2014, the U.S. Government announced its intent to transition its stewardship of the IANA functions to the global multistakeholder community: http://www.ntia.doc.gov/press-release/2014/ntia-announces-intent-transition… . Following this announcement, ICANN, was tasked with facilitating the development of a global, and representative proposal based on the following principles: 1. Support and enhance the multistakeholder model; 2. Maintain the security, stability, and resiliency of the Internet DNS; 3. Meet the needs and expectation of the global customers and partners of the IANA services; 4. Maintain the openness of the Internet. 5. The proposal must not replace the NTIA role with a government-led or an inter-governmental organization solution. The IANA Stewardship Transition Coordination Group (ICG) was formed in July 2014 (https://www.icann.org/en/stewardship) and tasked with assembling and delivering a proposal to NTIA through the ICANN Board. The ICG constituted three special interest groups representing the Domain Names community (NRO members), Numbering Resources community (CWG), and the Protocol Parameters community (IETF), ICG shall compile the proposals from the three communities into a single proposal which the ICG shall submit to the board for review, and the board shall forward the final proposal to NTIA. The three communities affected by IANA functions, IETF (handling protocol parameters), Numbering community - CRISP Team (under the umbrella of NRO), and Domain Names community (Cross Community Working Group) have released proposals on how the IANA transition should be handles. Number resource process and proposal can be found here: https://www.nro.net/nro-and-internet-governance/iana-oversight/consolidated… IETF process and proposal can be found here: https://www.ietf.org/iana-transition.html Domain names community process and proposal can be found here: https://community.icann.org/display/gnsocwgdtstwrdshp/CWG+to+Develop+an+IAN… Sincerely, Mwendwa Kivuva Consolidated Regional Internet Registries IANA Stewardship Proposal (CRISP) Team member - Representing AFRINIC region.

1 0

Re: [kictanet] Mpesa Migration
by Ali Hussein 22 Apr '15

22 Apr '15

Emmanuel There really isn't a right or wrong view on this. Success is defined differently by different constituents. For Safaricom that may well be that Mpesa has been successful beyond their wildest dreams. Locally (this includes East Africa). In my humble opinion though even locally the game isn't over yet. Not by a long shot. The payments space game is just warming up. There iis no dominant player in this space yet. Ali Hussein Hussein & Associates +254 770 906375 / 0713 601113 Twitter: @AliHKassim Skype: abu-jomo LinkedIn: http://ke.linkedin.com/in/alihkassim Blog: www.alyhussein.com "Discovery consists in seeing what everyone else has seen and thinking what no one else has thought". ~ Albert Szent-Györgyi Sent from my iPad > On Apr 21, 2015, at 7:34 PM, Emmanuel Khisa <oloo.khisa(a)googlemail.com> wrote: > > Ali, > > I beg to differ. > > Statistics show a different story. > > Tanzania: Mpesa is the largest provider of Mmoney services with a market share of 65%...about 8m users. > Afghanistan and Fiji : For the longest part Mpaisa has been a great service > Egypt and South Africa haven't been so great ( But one can also argue that in South Africa Vodafone attempted to let go of control and gave their platform to Nedbank and this didnt work out so well). > > I general Mobile Money requires a certain kind of gravitas in distribution that telcos do so well and most other sectors fail in so badly. > > In the end Ali, the question is "what does success really look like within the Mmoney context" > > My a quarter > >> On Tue, Apr 21, 2015 at 3:09 PM, Ali Hussein via kictanet <kictanet(a)lists.kictanet.or.ke> wrote: >> Dennis >> >> Safaricom needs to outsource cloud to Angani (disclosure: I'm a fan) :) >> >> Seriously though, for as long as Mpesa is under the control of Safaricom/Vodafone it will nor grow beyond Kenya. Safaricom uses Mpesa as a big stick against its competitors and I'm not sure that's the way to grow a brand. >> >> Ali Hussein >> Hussein & Associates >> +254 770 906375 / 0713 601113 >> >> Twitter: @AliHKassim >> Skype: abu-jomo >> LinkedIn: http://ke.linkedin.com/in/alihkassim >> Blog: www.alyhussein.com >> >> "Discovery consists in seeing what everyone else has seen and thinking what no one else has thought". ~ Albert Szent-Györgyi >> >> Sent from my iPad >> >>> On Apr 21, 2015, at 2:39 PM, Dennis Kioko via kictanet <kictanet(a)lists.kictanet.or.ke> wrote: >>> >>> By having a separate M-Pesa server and control over the same, allows Safaricom to vastly improve what M-Pesa can do, and also experiment a lot with the local market. >>> >>> Kenya is more mature than other countries in M-Pesa products - Safaricom is able to specifically create new services for Kenya. >>> >>> Secondly, Safaricom's running of M-Pesa servers enables the firm to build its cloud skills, and also to bring down the cost of cloud solutions to some extent, in my opinion. After all, skills and capacity can be shared with M-Pesa, with fixed costs coming down due to M-Pesa's uptake. >>> >>>> On Tue, 21 Apr 2015 at 13:57 Phares Kariuki via kictanet <kictanet(a)lists.kictanet.or.ke> wrote: >>>> Safaricom does not really care about QoS for users in India or Latvia for that matter. It's the KE users. >>>> >>>> -- >>>> Phares >>>> >>>>> On Apr 21, 2015, at 1:48 PM, Mwendwa Kivuva via kictanet <kictanet(a)lists.kictanet.or.ke> wrote: >>>>> >>>>> >>>>>> On 21 April 2015 at 09:47, Ali Hussein via kictanet <kictanet(a)lists.kictanet.or.ke> wrote: >>>>>> True that. Majority of users are in Kenya. For now. Would really be interesting to see how this affects the plans to go global especially if they want to tap into the remittances business and Vodafone has global ambitions for Mpesa... >>>>> >>>>> Ali, MPESA has gone global but not as a Safaricom product since the IP is owned by Vodafone. MPESA is in India, South Africa, Tanzania, Afghanistan, e.t.c. I am not an IP expert, but forget Safaricom ever getting anything out of it from the global market. Vodafone has that in their pockets. >>>>> >>>>> >>>>> >>>>> ______________________ >>>>> Mwendwa Kivuva, Nairobi, Kenya >>>>> >>>>> "There are some men who lift the age they inhabit, till all men walk on higher ground in that lifetime." - Maxwell Anderson >>>>> >>>> >>>>> _______________________________________________ >>>>> kictanet mailing list >>>>> kictanet(a)lists.kictanet.or.ke >>>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>>> >>>> >>>>> Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/pkariuki%40gmail.com >>>> >>>>> >>>>> >>>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. >>>>> >>>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. >>>> _______________________________________________ >>>> kictanet mailing list >>>> kictanet(a)lists.kictanet.or.ke >>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>>> >>>> Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/dmbuvi%40gmail.com >>>> >>>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. >>>> >>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. >>> _______________________________________________ >>> kictanet mailing list >>> kictanet(a)lists.kictanet.or.ke >>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >>> >>> Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com >>> >>> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. >>> >>> KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. >> >> _______________________________________________ >> kictanet mailing list >> kictanet(a)lists.kictanet.or.ke >> https://lists.kictanet.or.ke/mailman/listinfo/kictanet >> >> Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/oloo.khisa%40gmail.com >> >> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. >> >> KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. > > > > -- > ‎"Service to Mankind is the greatest form of service"... > > > > > Oloo Khisa > P.O. Box 24324-00100 > Nairobi > 0721321086/0731849128 > http://ke.linkedin.com/in/olookhisa

2 1

KICTANet's Input into the proposed Critical Infrastructure Bill
by Grace Githaiga 21 Apr '15

21 Apr '15

The Secretariat, Director Programmes & Standards, ICT Authority Telposta Towers, 12th Floor, Kenyatta Avenue, P. O Box 27150-00100 Nairobi. critical(a)ict.go.ke Kenya ICT Action Network (KICTANet)’s input into the proposed Critical Infrastructure Bill Acknowledge ICT is a tool that is critical for operations and hence requires specialized attention: availability, integrity and confidentiality. Starting point: Have criteria for defining what critical ICT infrastructure is. Distinguish between critical ICT infrastructure (Registry, content delivery networks) and traditional critical infrastructure. Question if there is need to put transport and energy infrastructure on Internet and if so, how is it protected? Anything put on the internet is vulnerable. Acknowledge that business models of ICT companies are different from the traditional models of non-ICT critical infrastructures such as energy utilities and industrial control systems. They require more maintenance and upgrades that translate into much more investments. How do we ensure we have scalable and resilient critical infrastructure? In the past we have seen government institutions invest in white elephants, sending them back to the procurement room before the system goes live. Consider the need for expertise to deal with and protect the infrastructure (developers focusing on software security and information security professionals specializing in critical infrastructure). Consider cybersecurity but avoid raising fear, uncertainty and doubt. Avoid any type of strategy that hacks back. Hacking back will not fix broken infrastructure, and the attribution problem makes it very hard and sometimes impossible to find the real source of attacks. Focus on defense and resilience. Need to have websites running latest versions of software including security updates otherwise we will continue to experience this: https://www.google.com/#q=%22hacked+by%22+site:go.ke. There should be a big focus on identifying XP use and migrating away from XP usage in government and critical infrastructures. Management questions 10. Who manages critical infrastructures? 11. Should the government own/manage/handle infrastructures like the NOFBi? 12. Which infrastructure can the government outsource? Which infrastructure is a security threat to outsource? Who are trusted partners for outsourcing? 15. What is the value of investment in NOFBI while there is no last mile connectivity? Should the NOFBI operator be able to go the long haul and provide last mile services to all intended recipient(s) of the service? 16. What levels of approvals are there (change management) for any change to happen in a critical internet resource? (Just last month, a misguided change at KENIC affecting DNSSEC affected the entire .ke domains for a whole day. No domain was accessible). 17. How is the security and integrity of PKI maintained? 18. How are the counties managing ICT county specific infrastructure and what capacities exist at that level? Roll out/ Rapid Response questions 19. How fast can we rollout, upgrade, and repaired our fibre optic infrastructure? (There has been a deliberate systematic plot to ensure there are no ducts on wayleaf to pull fibre optic cable within minimum time, and cost effectively). 20. Can we vet the software that runs on and support critical infrastructure? We have had cases of defective and compromised firmware, and compromised software that has payloads executed at certain times by malicious actors. Which software and hardware do we trust? Can we audit this software? 21. What is the role of standards? ( ISO 27000 series Standards on Information Security and the ISO 20,000 series on Service Management). Regulation vs Legislation and questions regarding scope 22. Is it necessary to have an Act on critical infrastructure considering the dynamism and complexity of ICT? Would a few amendments under the KICA 2013 not suffice?23. Would it perhaps not be useful to have separate acts or regulations for critical internet infrastructure on the one hand, and critical infrastructures like (power and transport) connected to the internet on the other hand? The two types of critical infrastructure are related but require different and specialized approaches.24. The development of a critical infrastructure policy framework should precede the bill to contextualize the Critical Infrastructure bill. The policy framework should also have an implementation framework, a result of which could be the development of a law. Before the development of the policy it may be necessary to conduct a study and expert consultation on the matter that includes a review of global best practices.25. The protection of critical infrastructure may be better managed under regulations rather than Bills/Acts. This is because in the fast changing world of IT, what is critical today may not be tomorrow and vice versa. Who would have known five years ago that M-PESA would move beyond just sending money, to becoming a lifestyle for millions of Kenyans aka a critical infrastructure? You don’t manage such issues through hard-wired Acts, but through Regulation. Recommendations on Policy and law The said policy and law should clearly outline: - Definition of what constitutes critical infrastructure. - Distinguish between critical internet/ICT infrastructures and critical infrastructures connected to the internet. - Criteria for identification of CI. - Threat analysis to various CI in Kenya. - Risk management framework for the CI. - Requirement of mandatory minimum protection of critical infrastructure as well as demonstrated assurance through compliance. - Coordination framework (including PPP arrangements, lead coordinating org and perhaps the need for a single body?). - Investigate frameworks for threat intelligence and information sharing between all concerned stakeholders. - Incident reporting mechanisms and investigations of possible requirements for breach disclosure to all affected stakeholders. - Research and development strategies. - Capacity assessment and development. - Funding mechanisms. - Implementation plan. Note: It will be important for institutions (private and public) to meet the law and associated regulatory requirements (Consistent with with the 2010 constitution). In addition, Institutions must integrate their plans with agencies/bodies (e.g. fire, security, emergency, hospitals, etc.) that are critical to effective response. Submitted on behalf of KICTANet by Grace Githaiga, Victor Kapiyo, Barrack Otieno, Mwendwa Kivuva, John Walubengo, Matunda Nyanchama, Alex Comninos and Ali Hussein

2 1

Seeking your opinion on dotAfrica
by nmutungu＠gmail.com via surveymonkey.com 21 Apr '15

21 Apr '15

1 0

Mpesa Migration
by Grace Mutung'u (Bomu) 21 Apr '15

21 Apr '15

Dear Listers, Other than the emotional value, what is in it for Kenyans with Mpesa "coming home"? -- Grace L.N. Mutung'u Nairobi Kenya Skype: gracebomu Twitter: @Bomu <http://www.diplointernetgovernance.org/profile/GraceMutungu>

9 16

Kenya among top data collectors, reveals research
by Gideon 20 Apr '15

20 Apr '15

Dear Listers, Interesting read on Big Data Kenya is among the most advanced countries in collecting and managing data in Africa, a global development think tank has revealed. http://www.nation.co.ke/news/Kenya-among-top-data-collectors-reveals-resear… Regards Gideon Rop

1 0

XENOPHOBIA AND SA MULTINATIONALS
by James Mbugua 20 Apr '15

20 Apr '15

Listers, It seems like some South African companies are having to scale back operations especially in the SADC region in the wake of xenophobic attacks affecting citizens of countries in the region. Multichoice has actually ran two ads in the Nation and Standard condemning the xenophobic attacks and promoting pan-Africanism. Question is, how much responsibility should multinationals take for events taking place in their mother countries. IT linked companies like MTN, UUnet, Internet Solutions, Jumia and so on operate across the continent. What should be their response to likely backlash from events they have no control over? Regards, James

1 0

Kenya among top data collectors, reveals research
by Grace Githaiga 20 Apr '15

20 Apr '15

Kenya is among the most advanced countries in collecting and managing data in Africa, a global development think tank has revealed.Some technology and development experts have even described the country as the “Silicon Savannah” of Africa, says a report published by the Overseas Development Institute (ODI). http://www.nation.co.ke/news/Kenya-among-top-data-collectors-reveals-resear…

3 2

Proposal to Setup an IT Lab and Train 15 Students
by Jude Kikuyu 20 Apr '15

20 Apr '15

Dear all, In case you are interested in participating in this proposal. Details can be found on their website. An excerpt is given below Jitegemee, a nonprofit organization working with street children in Machakos Kenya, is currently accepting proposals to develop a computer lab by June of 2015 and launch a pilot class focused on web development skills for at least 15 students that will run daily for at least three months. For more information on how to submit a proposal, please visit: http://www.jitegemee.org/?p=2820

1 0