ISC2 Kenya Chapter

✨ Celebrating a Night of Insight & Connection ✨

The ISC2 Kenya Chapter hosted an inspiring networking dinner that brought together leaders and professionals in cybersecurity, audit, compliance, and governance for an evening of learning, collaboration, and community.

The highlight of the evening was a fireside chat on 𝐒𝐭𝐫𝐞𝐧𝐠𝐭𝐡𝐞𝐧𝐢𝐧𝐠 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐓𝐫𝐮𝐬𝐭: 𝐈𝐓 𝐀𝐮𝐝𝐢𝐭𝐬, 𝐀𝐈, 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞, 𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞, 𝐚𝐧𝐝 𝐭𝐡𝐞 𝐅𝐮𝐭𝐮𝐫𝐞 𝐨𝐟 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐓𝐫𝐚𝐧𝐬𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧 𝐢𝐧 𝐀𝐟𝐫𝐢𝐜𝐚

The discussion explored real-world challenges and practical solutions around AI-driven security, fraud risk management, compliance maturity, infrastructure resilience, and leadership in digital transformation.

Moderated by Harvey Sijenyi, the session featured powerful insights from Dr. Stanley Mwangi Chege PhD, Dr. Aprielle Moraa, FRANCIS MWANGI,CISSP, CC, Dennis Muchiri CISSP, CFE, MBA, Steve Mambo, and Stellah Kilonzo, PMP®

👏 A huge thank you to our speakers, members, and guests who made this evening a success. Together, we are shaping the future of digital trust and resilience in Africa.

As we approach the close of 2025, the ISC2 Kenya Chapter leadership team extends our warmest wishes to all our members, partners, and the wider cybersecurity community.

Christmas is a season of reflection, gratitude, and hope. We are deeply thankful for the dedication, collaboration, and resilience shown by our community throughout the year. Together, we have advanced knowledge, strengthened networks, and built a safer digital environment for Kenya and beyond.

May this festive season bring you peace, joy, and cherished moments with your loved ones. As we look ahead to 2026, we remain committed to empowering professionals, fostering innovation, and nurturing the next generation of cybersecurity leaders.

From our ISC2 Kenya Chapter family to yours:
🌟 Merry Christmas, Happy Holidays, and a Secure New Year! 🌟

🌟 𝐈𝐒𝐂2𝐊𝐄 𝐌𝐨𝐧𝐭𝐡𝐥𝐲 𝐓𝐚𝐥𝐤 🌟

𝐓𝐨𝐩𝐢𝐜: Deploying Privacy by Design & Security by Default
𝐒𝐩𝐞𝐚𝐤𝐞𝐫: Elvis Mwakoi
𝐃𝐚𝐭𝐞: 13th March 2025
𝐓𝐢𝐦𝐞: 8:00 PM - 9:00 PM (Nairobi Time)
𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦: Google Meet

Join us for an insightful session on integrating privacy and security into your systems and processes from the ground up.
Don't miss this opportunity to learn from an expert in the field!

📩 Message us for the Google Meet link.

🌐 Join Us for an Insightful Webinar! 🌐

🔍 Understanding the Impact of Data Breaches on Businesses and Governments: Lessons from Kenya's BRS Incident 🎤 with Robert Weches

📅 Date: Thursday, February 13
🕗 Time: 8:00 – 9:00 PM (Africa/Nairobi)
📍 Where: Google Meet https://meet.google.com/equ-pqpw-pqq

In today’s digital landscape, data breaches pose significant risks to organizations of all sizes. Join us as we delve into the recent BRS incident in Kenya, exploring the lessons learned and how businesses and governments can better safeguard their data.

The 3 Types of Threat Intelligence 🔍

Cyber threats are constantly evolving, and threat intelligence helps organizations stay ahead by understanding who is targeting them, what tools they use, and why.

🔹 Tactical Intelligence – Focuses on indicators of compromise (IOCs) like malicious IPs, URLs, and hashes. It’s often automated and helps detect immediate threats but has a short shelf life and can generate false positives.

🔹 Operational Intelligence – Provides insight into threat actors’ tactics, techniques, and procedures (TTPs). Requires human analysis and allows security teams to anticipate and counter cyber threats more effectively.

🔹 Strategic Intelligence – The big-picture view that connects cyber risks to geopolitical and business contexts. Helps executives and security leaders make informed cybersecurity investment and risk management decisions.

💡 Takeaway: Combining tactical, operational, and strategic intelligence enables organizations to not just react to threats, but proactively strengthen their security posture.

Get ready for an enlightening session with Nancy Muriithi! 🎉

Topic: Threat Intelligence and Hunting

Date: Thursday, 16 January Time: 20:00 – 21:00 (Africa/Nairobi Time Zone)

Join us on Google Meet: https://lnkd.in/d5sB9e5H

Don't miss out on this valuable opportunity to enhance your knowledge and skills in the ever-evolving field of threat intelligence.
See you there! 🚀
Mark your calendars. It's going to be an insightful evening! 🛡️🔍
Be sure to join us! 📅

https://www.linkedin.com/posts/isc2kenyachapter_cybercrime-topcybercrimes2024-activity-7279079632279138305-9nmV?utm_source=share&utm_medium=member_android

ISC2 Kenya Chapter on LinkedIn: #cybercrime #topcybercrimes2024 2024 saw a surge in cybercrime, with ransomware, data breaches, and state-sponsored attacks making headlines. 𝐇𝐞𝐫𝐞'𝐬 𝐚 𝐬𝐮𝐦𝐦𝐚𝐫𝐲 𝐨𝐟 𝐭𝐡𝐞 𝐭𝐨𝐩…

𝐒𝐞𝐚𝐬𝐨𝐧'𝐬 𝐆𝐫𝐞𝐞𝐭𝐢𝐧𝐠𝐬 𝐟𝐫𝐨𝐦 𝐈𝐒𝐂2 𝐊𝐞𝐧𝐲𝐚 𝐂𝐡𝐚𝐩𝐭𝐞𝐫!

As we celebrate this joyous season, we extend our warmest wishes to all our members, partners, and the entire community.

May the spirit of bring you closer to your family and friends, and may your home be filled with the warmth and cheer of the festive season.

We are grateful for your continued support and dedication to our shared mission of promoting a safe and secure cyber environment.
As we look forward to the new year, we are excited about the opportunities that lie ahead and the progress we can achieve together.

From all of us at , we wish you a Merry Christmas and a prosperous May the coming year bring you success, good health, and fulfillment in all your endeavors. 🎄✨

Happy Jamhuri Day, Kenya! 🇰🇪

As we celebrate 60 years of independence, the Chapter reflects on our incredible journey of national pride, resilience, and unity.

This milestone reminds us of our collective efforts and the progress we've made as a nation.

On this special day, we honor the sacrifices of those who fought for our freedom and the continued efforts of all Kenyans in building a secure, prosperous, and innovative future.

ISC2 Kenya Chapter is committed to fostering cybersecurity excellence, ensuring that our digital landscape is as robust and resilient as our national spirit.

Let's come together to celebrate our heritage, our achievements, and our aspirations for a brighter tomorrow.

Happy Jamhuri Day, Kenya! ✊🏿🇰🇪

Business Email Compromise (BEC) is a targeted attack where criminals attempt to trick senior executives or budget holders into transferring funds or revealing sensitive information.

Unlike indiscriminate phishing emails, emails are crafted to deceive specific individuals and can include convincing requests for payments, links to malicious websites, or virus-laden attachments.

BEC is a significant threat to organizations of all sizes and sectors, including non-profits and government agencies, making it crucial to recognize the signs of these targeted attacks.

Courtesy of the National Cyber Security

𝐌𝐨𝐛𝐢𝐥𝐞 𝐃𝐞𝐯𝐢𝐜𝐞 𝐁𝐞𝐬𝐭 𝐏𝐫𝐚𝐜𝐭𝐢𝐜𝐞𝐬

Threats to mobile devices are more prevalent and increasing in scope and complexity. Users of mobile devices desire to take full advantage of the features available on those devices, but many of the features provide convenience and capability but sacrifice security.

This best practices guide by NSA - National Security Agency outlines steps the users can take to better protect personal devices and information.