- KICTANet - KICTANet

Re: [kictanet] [Security Forum] [Skunkworks] #KeIGF15 Online Discussions Day Two: Cyber Security and Trust
by Mwendwa Kivuva 21 Jul '15

21 Jul '15

On 21 July 2015 at 11:00, Jared Koyier via Security <security(a)lists.my.co.ke > wrote: > The biggest question is whether people responsible for CyberSecurity in > government have the resources and technical capacity. Good example is the > recent embarrassing hackingteam exposure in which one of the officers in > the NSIS is captured seeking international help in defacing a simple blog. > Just for the record, here is the email transcript where Kenyan State House operatives were allegedly seeking EXTENAL help to hack Kenya websites https://www.wikileaks.org/hackingteam/emails/?q=kensi.org&mfrom=&mto=&title… a and this his how Nation reported the story: http://mobile.nation.co.ke/news/NIS-WikiLeaks-Hacking-Team-Surveillance/-/1… Of Interest is sometimes back, a Kenyan government agency was giving orders that all websites should be hosted locally. From the Hacking Team fiasco, we can clearly see why the government wants websites to be hosted locally. So that they can just physically seize the computer box instead of having to employ Hackers from Russia to do the dirty job for them. I am surprised Civil Society actors have not come out very strongly to question this move of internal hacking by government. After Snowden, we saw how Civil Society in US came out very strongly to protest the violation of basic rights by the State. The US government had to apologize for the embarrassing revelations, and try to cover it's back. Of course the argument I hear this days is there is no government that does not do cyber espionage. Only that some governments are more adept in their skills than others. Regards ______________________ Mwendwa Kivuva, Nairobi, Kenya "There are some men who lift the age they inhabit, till all men walk on higher ground in that lifetime." - Maxwell Anderson

1 1

Re: [kictanet] [Skunkworks] #KeIGF15 Online Discussions Day Two: Cyber Security and Trust
by Barrack Otieno 21 Jul '15

21 Jul '15

Well said with Steve and Explorer, Security matters are tied to value systems. Without values there is no security. I stand to be corrected but in the vision 2030 document we had a pillar that received very little attention. This pillar touched on National values , i think this is where the rain started beating us on the security front. Recent interventions from the government and religious communities have emphasized on collective responsibilities and being your brothers keeper (Nyumba kumi et al). I think the same approach should be applied to stem Cyber Security that is sensitizing users on the importance of confidentiality. This can best be done by implementing Security standards such as ISO 27000 series which break down security into a laymans language. Regards On 7/21/15, Stephen Munguti via skunkworks <skunkworks(a)lists.my.co.ke> wrote: > Hello all, > > I think most of our security concerns stem from internal users and this is > the reason many banks and telecos refuse to part with this information, i > could be wrong though > > On Tue, Jul 21, 2015 at 8:58 AM, Grace Mutung'u (Bomu) via skunkworks < > skunkworks(a)lists.my.co.ke> wrote: > >> Dear Listers, >> >> >> Kenya has had its fair share of high profile cyber threats, hacking etc, >> the latest being the alleged compromise of the IFMIS system at >> NYS/Ministry >> of Devolution. The country and Africa at large is making efforts to >> assure >> cyber-security. These include among others her involvement in the Africa >> Union Convention on Cybercrime and a proposal for a Cybercrime law, an >> initiative led by the Office of the Director of Public Prosecutions. >> Significant financial resources have also been earmarked by government >> for >> security and cyber security in particular. There are also partnerships >> between government and private sector in deploying cybersecurity centres. >> >> The private sector has employed practical measures to protect their >> businesses. However, businesses such as mobile money providers and banks >> have been shy to divulge their cyber security concerns to protect their >> interests. >> >> Civil society on the other hand has raised concern about the line between >> protecting the cyber space and creating a facilitative environment for >> innovators as well as protecting the rights of users. >> >> >> >> Are our efforts at deterring cyber-crime the correct way to assure cyber >> security? Are fears about a partnership between government and private >> sector and the general fears about stifling innovation and human rights >> in >> the name of cybersecurity legitimate? Are there other practical >> approaches >> that different stakeholders can take to enhance cyber security? >> >> >> Over to you. >> >> -- >> Grace L.N. Mutung'u >> Nairobi Kenya >> Skype: gracebomu >> Twitter: @Bomu >> >> <http://www.diplointernetgovernance.org/profile/GraceMutungu> >> >> >> _______________________________________________ >> skunkworks mailing list >> skunkworks(a)lists.my.co.ke >> ------------ >> List info, subscribe/unsubscribe >> http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks >> ------------ >> >> Skunkworks Rules >> http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 >> ------------ >> Other services @ http://my.co.ke >> > > > > -- > > Best Regards, > Stephen Munguti. > > +254720425104 > -- Barrack O. Otieno +254721325277 +254-20-2498789 Skype: barrack.otieno http://www.otienobarrack.me.ke/

2 1

#KeIGF15 Online Discussions Day One: Inclusiveness and Diversity
by Grace Mutung'u (Bomu) 21 Jul '15

21 Jul '15

Listers, Since promulgation of the Constitution, Kenya has become a litigious society, and the ICT/Internet sector has not been spared. For instance, the processes used to constitute public ICT bodies was contested while a good part of the digital migration process also played out in the public galleries. Looking at Kenya's past journey in ICT/Internet governance, has it been inclusive? Are we presently adhering to Article 10 on public participation in local Internet governance matters? Do the present mechanisms facilitate meaningful participation of all including those with disabilities? What are the roles of the various stakeholders and are they all playing their roles? Is the ICT environment in Kenya inclusive—that is, with an atmosphere in which all people feel valued and respected and have access to the same opportunities? What is the state of Universal Access and implementation of Universal Service Fund in Kenya? Are the USF Council members representative of the Internet community in Kenya? Are all stakeholders' interests taken into consideration in forming the USF council? Welcome to the discussion. -- Grace L.N. Mutung'u Nairobi Kenya Skype: gracebomu Twitter: @Bomu

5 6

Fwd: [AfrICANN-discuss] CCWG on Enhancing ICANN Accountability Paris - Communiqué
by Barrack Otieno 21 Jul '15

21 Jul '15

Listers, FYI. Regards ---------- Forwarded message ---------- From: Mamadou LO <alfamamadou(a)hotmail.com> Date: Tue, 21 Jul 2015 07:12:30 +0000 Subject: [AfrICANN-discuss] CCWG on Enhancing ICANN Accountability Paris - Communiqué To: "africann(a)afrinic.net" <africann(a)afrinic.net>, "ncsg-discuss(a)listserv.syr.edu" <ncsg-discuss(a)listserv.syr.edu>, "fellowships-alumni(a)icann.org" <fellowships-alumni(a)icann.org>, "outreach_com_2015(a)intgovforum.org" <outreach_com_2015(a)intgovforum.org> FYI Cross Community Working Group on Enhancing ICANN Accountability Paris Communiqué https://www.icann.org/news/announcement-3-2015-07-20-en#prclt-JKT16gbK Regards! Mamadou -- Barrack O. Otieno +254721325277 +254-20-2498789 Skype: barrack.otieno http://www.otienobarrack.me.ke/

1 0

Re: [kictanet] #KeIGF15 Online Discussions Day Two: Cyber Security and Trust
by 0xexplorer 21 Jul '15

21 Jul '15

IMHO there is still a lot to be done to enhance cyber security. A computer incident response team was setup some time ago however their activities are hardly seen or heard of in the public domain. Secondly the recent Hacking Team leaks revealed agents allegedly acting on behalf of the state to engage in potentially illegal activities. It is a challenge to even assess the readiness of the country to handle significant cyber security incidents. I feel that a culture that encourages information sharing and promoting awareness amongst the general public would be a great start. My two cents. -- 0xexplorer -------- Original Message -------- Subject: [kictanet] #KeIGF15 Online Discussions Day Two: Cyber Security and Trust Time (GMT): Jul 21 2015 05:58:44 From: kictanet(a)lists.kictanet.or.ke To: 0xexplorer(a)protonmail.ch CC: nmutungu(a)gmail.com Dear Listers, Kenya has had its fair share of high profile cyber threats, hacking etc, the latest being the alleged compromise of the IFMIS system at NYS/Ministry of Devolution. The country and Africa at large is making efforts to assure cyber-security. These include among others her involvement in the Africa Union Convention on Cybercrime and a proposal for a Cybercrime law, an initiative led by the Office of the Director of Public Prosecutions. Significant financial resources have also been earmarked by government for security and cyber security in particular. There are also partnerships between government and private sector in deploying cybersecurity centres. The private sector has employed practical measures to protect their businesses. However, businesses such as mobile money providers and banks have been shy to divulge their cyber security concerns to protect their interests. Civil society on the other hand has raised concern about the line between protecting the cyber space and creating a facilitative environment for innovators as well as protecting the rights of users. Are our efforts at deterring cyber-crime the correct way to assure cyber security? Are fears about a partnership between government and private sector and the general fears about stifling innovation and human rights in the name of cybersecurity legitimate? Are there other practical approaches that different stakeholders can take to enhance cyber security?

2 1

#KeIGF15 Online Discussions Day Two: Cyber Security and Trust
by Grace Mutung'u (Bomu) 21 Jul '15

21 Jul '15

Dear Listers, Kenya has had its fair share of high profile cyber threats, hacking etc, the latest being the alleged compromise of the IFMIS system at NYS/Ministry of Devolution. The country and Africa at large is making efforts to assure cyber-security. These include among others her involvement in the Africa Union Convention on Cybercrime and a proposal for a Cybercrime law, an initiative led by the Office of the Director of Public Prosecutions. Significant financial resources have also been earmarked by government for security and cyber security in particular. There are also partnerships between government and private sector in deploying cybersecurity centres. The private sector has employed practical measures to protect their businesses. However, businesses such as mobile money providers and banks have been shy to divulge their cyber security concerns to protect their interests. Civil society on the other hand has raised concern about the line between protecting the cyber space and creating a facilitative environment for innovators as well as protecting the rights of users. Are our efforts at deterring cyber-crime the correct way to assure cyber security? Are fears about a partnership between government and private sector and the general fears about stifling innovation and human rights in the name of cybersecurity legitimate? Are there other practical approaches that different stakeholders can take to enhance cyber security? Over to you. -- Grace L.N. Mutung'u Nairobi Kenya Skype: gracebomu Twitter: @Bomu <http://www.diplointernetgovernance.org/profile/GraceMutungu>

1 0

Re: [kictanet] [Security Forum] #KeIGF15 Online Discussions Day One: Inclusiveness and Diversity
by meshack emakunat 20 Jul '15

20 Jul '15

Hi all, making inclusiveness and diversity a norm within our policy formulation mechanism will require the utilization of governance structures (county governments) ------------------------------ On Mon, Jul 20, 2015 6:07 AM PDT Mwendwa Kivuva via kictanet wrote: >Thank you Grace and Barrack for this important topic. > >I will start by sharing the sentiments of the Speaker of the National >Assembly Justin Muturi. >http://www.nation.co.ke/oped/Opinion/Kenyans-must-be-involved-in-all-proces… >The speaker lamented that public participation ... and consultation in >matters of national building are either not happening, or not enough. >"citizens wanted to be consulted on everything being done on their behalf >by their leaders and that transparency was not optional", he said. > >As it stands, the Communications Authority of Kenya is in limbo after the >court threw out the sitting board pending appeal. Is it possible that there >was proper consultation by the Ministry and Cabinet Secretary of ICT, but >some people did not feel their "interests" were covered well enough and >opted to run to the courts? > >Well, being a member of the CA board may attract bigger allowances, >probably the reason why the litigants did not bother with the important >Universal Service Fund (USF) Council. The USF is supposed to be the >ultimate inclusiveness and diversity tool when it comes to offering a >semblance of uniform communication services to all Kenyans may it be radio, >postal, telecommunications or cyber services. I am yet to see any report on >how the USF Council has contributed to bridging the digital divide using >the funds at their disposal. A little history here will help. The >Universal Service Advisory Council (USAC) was entrenched in the Kenya >Information and Communications act (1998) to advice the then CCK and give >policy guidance in the implementation of the USF. The term of the first >USAC expired in January 2014, and a new Council put in place from May 2014 >to May 2017. I understand there are a few pilot projects that have been >setup across the country by the USF, but we would like to see a report on >the same from the said Council, and probably measure the effectiveness of >these projects. > >There is also the issue of "Multi-stakeholder-ism", how is it playing out >in our ICT landscape? Does the word make any sense to the different >stakeholders? How are partnerships forged between say government and >business community or academia? Well, I have seen many initiatives in the >country where the different stakeholders have partnered and blended really >well to transform the society. A good case is our celebrated ICT hubs >especially in Nairobi ... iHub, iLab, C4Dlab, Nairobi Garage, e.t.c. where >businesses have partnered with the government and academia and the >technical community to give our youth hope and opportunities in life. "The >Kenyan Dream". Truly, multistakeholderism can work. We only need to put >more effort, and recognise the important role eac stakeholder plays. > >Sincerely, > >______________________ >Mwendwa Kivuva, Nairobi, Kenya > >"There are some men who lift the age they inhabit, till all men walk on >higher ground in that lifetime." - Maxwell Anderson

1 0

KICC: INVITATION TO THE GLOBAL ENTREPRENEURS SUMMIT (GES) - 2015 KNOWLEDGE PROGRAM ON 22ND AND 23RD JULY AT KICC
by WANGARI KABIRU 17 Jul '15

17 Jul '15

Warm Greetings Colleagues, There was a query on GES. Some may find this useful ....closer to it. Read and if interested, kindly register directly through the contacts given below - deadline Friday July 17. Blessed day. Regards/Wangari --- Pray God Bless. 2013Wangari circa - "Being of the Light, We are Restored Through Faith in Mind, Body and Spirit; We Manifest The Kingdom of God on Earth". On Friday, 17 July 2015, 10:52, William Kalombo <wkalombo(a)marketingafrica.co.ke> wrote: timetable The Government of Kenya will be co-hosting the 6th Global Entrepreneurship Summit (GES) 2015 jointly with the US Government in Nairobi from 22nd to 24th July 2015. Organized in different parts of the world since 2009, the summit has emerged as a global platform for bringing together entrepreneurs, leading business persons, investors, international & government organizations to strengthen ties as well as to focus on the contribution of entrepreneurship to economic prosperity. As a precursor to the event, the GES 2015 coordinating Committee in conjunction with the KICC has organized an exhibition to show case Kenya’s entrepreneurial and innovative culture on 22nd to 24th July 2015 at the KICC. During the exhibition, there will be a two (2) days knowledge sharing program focussing on innovation and promotion of entrepreneurship. On behalf of The KICC, we wish to cordially invite those who wish to attend the knowledge program set for 22nd and 23rd July to confirm attendance via mail to: geexpo(a)kicc.co.ke. Copy: info(a)marketingafrica.co.ke and: WMairura(a)marketingafrica.co.ke. Kindly include your full names, company details as well as cell number for ease of registration for participation. Registration window closes cob Friday 17th and is on a first come basis. A more detailed program will be shared with those who confirm attendance. We thank you once again for your indulgence and wish you a great week ahead! William Kalombo, Chief Executive Officer, Marketing Africa Limited, P. O. Box 36481 - 00200,Cell: +254 - 0722 – 236 522, NAIROBI – KENYA

1 0

Communications Authority of Kenya in trouble, AGAIN
by Mwendwa Kivuva 17 Jul '15

17 Jul '15

Once upon a time, there used to be a Greek Philosopher called Diogenes of Sinope who lived circa 300BC. With all his flaws aside, Diogenes used to walk during the daytime with a lantern. Asked why he would say, "I am looking for one honest man". His philosophy was the unreasoning behavior of the people around him meant that they do not qualify as human. Fast-forward to modern Kenya, we were lucky to have a learned President by the name of Kibaki whose party DP had a lantern as it's logo. It's no coincidence then that during Kibaki's regime, Kenya experienced high economic growth, and drastic reduction in corruption. The Court of Appeal has rejected the Ministry of ICT request to have the CA board in office pending the appeal. http://www.nation.co.ke/business/Court-rejects-bid-to-keep-CA-board-in-offi… This ruling has several implications, one of them being the appointment of the Director General Francis Wangusi may be deemed null and void because his appointment came when CA did not have a substantive Board in place. Well, that is not what I wanted to talk about. The Ombudsman is probing allegations that the said CA Board has been allocating themselves hefty allowances totaling 10 million in 5 months. http://www.nation.co.ke/business/Ombudsman-probes-claims-of-irregular-allow… If those allegations are true, I wonder why the Cabinet Secretary would want to keep a criminal board at CA. I'm just wondering why honorable Kenyans appointed into positions to oversight running of important institutions like CA turn into hyenas and start devouring the institutions. Is this the reason the community has been advocating for simple reports from CA like the use of Universal Service Funds (USF) to no avail? Are these the people derailing President Uhuru's digital government, and the President's honest fight against corruption? CS Dr. Matiangi, please shine your lantern over at Communications Authority. Yours Sincerely, ______________________ Mwendwa Kivuva, Nairobi, Kenya "There are some men who lift the age they inhabit, till all men walk on higher ground in that lifetime." - Maxwell Anderson

1 0

KeIGF 2015 Online Discussions 20th to 26th July 2015
by Grace Mutung'u (Bomu) 17 Jul '15

17 Jul '15

Listers, The 2015 edition of the annual Kenya Internet Governance Forum (#KeIGF) will take place on Friday 31st July 2015 at the Stanley Hotel, Nairobi. As is our tradition, we shall engage in online discussions prior to the face to face meeting. The online discussions aim to spur debate and propose solutions that may be adopted during the KeIGF meeting. The discussions also provide an opportunity for deeper analysis of issues by listers as more time and space is available to bring out different aspects of the topics that form part of the KeIGF programme. Listers, even those who may not make it for the Friday 31st meeting are encouraged to add their voice to the discussions. Barrack and I will moderate the same starting Monday next week. The general outline of the topics will be as follows: Day One: 20th July 2015: Inclusiveness and Diversity Day Two: 21st July 2015: Cyber Security and Trust Day Three:22nd July 2015: Internet Economy Day Four:23rd July 2015: Critical Internet Resources Day Five :25th July 2015: Emerging Issues Day Five and Six :25th-26th July 2015: Openness Looking forward to the discussions, Regards, -- Grace L.N. Mutung'u Nairobi Kenya Skype: gracebomu Twitter: @Bomu <http://www.diplointernetgovernance.org/profile/GraceMutungu>

1 0