April 2022 - KICTANet

A study paper on human-centered cybersecurity: Kenyan Fintech sector
by David Indeje 08 Apr '22

08 Apr '22

[image: image.png] Dear Listers, Cybersecurity does not only involve the protection of systems and technology but also extends to the all-around protection of users, their intangible values, physical security, and ensuring non-disruption of their daily critical activities. It is for this reason that KICTANet, in collaboration with Trust4Cyber Flagship Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH, prepared “A study paper on human-centered cybersecurity: Kenyan Fintech sector.” The study maps out the cybersecurity landscape in Kenya and focuses on the financial sector. It also advocates for a human-centric approach to cybersecurity. Here is a link to the paper and so much more from our policy briefs https://www.kictanet.or.ke/policy-briefs/ *Kind Regards,* *David Indeje *_____________________________________ +254 (0) 711 385 945 | +254 (0) 734 024 856 <https://www.linkedin.com/in/david-indeje/>

1 0

Application for IEBC Accreditation as Election Observers
by David Indeje 08 Apr '22

08 Apr '22

Dear Listers, The Independent Electoral and Boundaries Commission (IEBC) has given us (KICTANet) and they are giving us an opportunity to be Long-Term Election Observers for the period before, during, and after the August 9th, 2022 General Election. Those interested in this initiative, kindly share with us your: 1. Your Name as it appears on the ID 2. Passport -size photograph in soft copy (.png/.jpg/.jep formats) 3. Telephone number 4. Copy of your ID Any interested person to send the details to nkakusu(a)kictanet.or.ke or dindeje(a)kictanet.or.ke on or before 9 May 2022 to give sufficient time to complete the process. If your documents are with us already, kindly let us know. *All the data we collect adheres to the KICTANet Privacy Statement available here: https://www.kictanet.or.ke/privacy-policy/ <https://www.kictanet.or.ke/privacy-policy/>. By submitting the information requested, you consent to our collection and processing of the information for the specific purpose outlined above.* *Kind Regards,* *David Indeje *_____________________________________ +254 (0) 711 385 945 | +254 (0) 734 024 856 <https://www.linkedin.com/in/david-indeje/>

1 0

Your Contact Lists and Privacy
by Adrian Teri 05 Apr '22

05 Apr '22

Good Day all, Do you pause to ask yourself if you're violating the agency and privacy of individuals in your contact list even in apps that need them to function? A la social media apps. https://restofworld.org/2022/how-truecaller-built-a-billion-dollar-id-data-… Regards, Adrian Teri

5 6

Child Online Protection
by Watoto Watch Network 05 Apr '22

05 Apr '22

Dear Listers, Make your voice heard, Public Consultation on Industry Guidelines for Child Online Protection and Safety in Kenya. The guidelines are available on Communications Authority website,see below link. https://www.ca.go.ke/public-consultation-on-industry-guidelines-for-child-o… Deadline to give your input, 22nd April 2022. Thanks. Kind regards, Lillian Kariuki (Executive Director of Watoto Watch Network) 2nd Floor, Ngong Hills Business Center, Ngong Rd, Nairobi P.O BOX 535-00517, Nairobi, Kenya *Tel:* +254 701 077 955 *Email*: Lillian(a)watotowatchnetwork.org *Website* : www.watotowatchnetwork.org watotowatchnet watotowatchnetwork <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> Virus-free. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campai…> <#m_-3135496477689208555_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

1 0

VIDEO: Building ICTs Better in a Post #COVID19 Era
by David Indeje 05 Apr '22

05 Apr '22

Dear Listers, We held a successful webinar last week on the success we have have had and how we can build a better and effective ICT sector post COVID 19. Below is the link to the webinar. Kindly, subscribe to our channel as more interesting conversations will be uploaded. https://youtu.be/nDi2zgZliEc

1 0

Webinar: Building ICTs Better in a Post #COVID19 Era
by David Indeje 04 Apr '22

04 Apr '22

Dear Listers, Our Webinar will start at 11am. If you have not registered yet, kindly do so as per the details below. *Date: 31 March 2022 | Time: 1100hrs – 1330hrsPlace Zoom Webinar: * https://bit.ly/3tLbcWo

2 1

Re: [kictanet] KICTANet Digest, Vol 168, Issue 28
by Adrian Teri 04 Apr '22

04 Apr '22

Any response/details from *Safaricom* on this? It's been ~2 months now. Here are a couple more from last month: - https://twitter.com/GMONEYizME/status/1505956691304763392?s=20&t=jYXxOcC4h9… and, - https://twitter.com/XZBeats/status/1506118402410225664?s=20&t=jYXxOcC4h9L_6… As we have established and conceded that a phone number is important for authentication especially for gov't services and thus, the real world stakes have grown bigger. Borrowing from the Internet, why shouldn't all the telcos adopt a Domain Name like System (DNS) for purchasing a mobile line? A model like Extended Validation (EV) SSL certificates may also be incorporated to thoroughly assure operational and physical existence. I don't know if The ODPC has been pronounced on this matter but they should as subscribers are getting access to information without consent that may be personally identifiable (PII) and it's also not theirs. Under Chapter 4 - The Bill of Rights, Article 31 articulates every person has the right to privacy relating to their family or private affairs and also their communications. A relatively small fee would be needed for each year(or minimum period to be determined by the telco?). I recognise a similar problem to IPv4 addresses as telcos have fixed prefixes(fixed resources) assigned to them but it's an even bigger challenge as we don't want the reuse of these numbers. I foresee a cascade of protocols and rules that would need to be implemented e.g an individual can only have 1 line, a business 3-5 ..etc. I have cautiously avoided the leased lines route as they are blatantly exorbitant. Even though I pose this challenge to #Safaricom, I don't believe it's their sole responsibility to effect such changes. A conversation starter that will include the CA in their responsibility of managing numbering resources? I hope it does so. I wonder why #Safaricom supports *eSims* but you have to visit a physical store to activate it. With The CBK pushing for a *CBDC* and competition for *m-pesa *to be more *interoperable *I no longer see a mobile line being a shackle to use services aka *high switching costs*. Why does one need to visit a shop *physically* to activate an eSim unlike other jurisdictions where it's not the case? Yes there will be a rise of risks such as *sim swaps *as evidenced in other jurisdictions where a user exercises controls of their mobile line subscriptions via web platform or app. However, this presents a learning & improvement opportunity from their pitfalls to forge a better path. For* Safaricom *customers who have swapped/ported to eSims any negative experiences such as signal loss, call drops and/or issues with* m-pesa*? There were issues when #Safaricom started to roll out the *011* prefix - *https://gadgets-africa.com/2020/12/02/safaricoms-011-prefix-phone-numbers/ <https://gadgets-africa.com/2020/12/02/safaricoms-011-prefix-phone-numbers/>* We've already seen "problems" with issues such as you must always log out of your *m-pesa* app before changing your sim card or more prevalently reselling/handing down your device - *https://nation.africa/kenya/business/technology/m-pesa-why-you-must-always-log-out-before-changing-sim-card-3605912 <https://nation.africa/kenya/business/technology/m-pesa-why-you-must-always-…>.* I chalk this up this to inadequate sensitization/education and/or poor UX flows. All in all, I believe this is why #Safaricom hires the best brains to discover, elicit, analyse, architect and implement solutions to problems. Lastly, @Stephen Chege for 3 months (Since January) why have my folks been getting *monthly *messages from #Safaricom to recharge a line or else they lose it. From a reply dated *7th Sept 2020*, you stated that #*Safaricom* adheres to the global best practice set out by the ITU of topping up a line once every 90 days in order to be considered active. Is this not the case anymore? Your full reply is here - *https://lists.kictanet.or.ke/pipermail/kictanet/2020-September/036191.html <https://lists.kictanet.or.ke/pipermail/kictanet/2020-September/036191.html>* . Regards, Adrian Teri

1 0