Cyber Essentials Framework-Kenya
A cyber security certification scheme for Kenyan SMEs.
Cyber Essentials Framework Kenya (CEF-K) is a certification scheme that helps small and medium-sized Kenyan businesses protect themselves against the most common online threats. It's adapted from the UK's Cyber Essentials scheme.
CEF-K · Kenya
Kenya Cyber Essentials Framework
Most attacks exploit the basics. So fix the basics.
A voluntary certification standard for Kenyan SMEs - localised from UK Cyber Essentials and rebuilt around mobile money, BYOD and cloud.
Six proven controls, adapted. One built for Kenya.
Boundary firewalls
To secure internet connections.
Secure configuration
To ensure systems are built and configured securely.
User access control
To restrict access to data and services.
Malware protection
To protect against viruses and malicious software.
Patch management (Security update management)
To keep devices and software updated.
Mobile money security
Protects mobile money integrations (e.g., M-Pesa, Airtel Money) against fraud, SIM-swap attacks, and unauthorised transactions.
Three tiers, one portable certificate.
CEF-K Basic
CEF-K Standard
CEF-K Plus
The CEF-K Consortium.
A proprietary initiative of Africa Insights Consulting, iLab Africa at Strathmore University, and Yelbridges.
Africa Insights Consulting
Standard owner: scheme design, IP, quality assurance, and assessor licensing.
iLab Africa, Strathmore University
Assessor curriculum with Cisco NetAcad, plus the research base behind Kenya-specific guidance.
Yelbridges
Control implementation guidance, assessment tooling, and support for pilot organisations.