Kenya Launches EU-backed KSH454M Cybersecurity Initiative

Kenya has launched a KSh454 million European Union–funded cybersecurity programme to strengthen national cyber defences as digital public services expand and cyber threats grow more frequent and costly. The Kenya Cyber Resilience (KCR) Project will run for 36 months and focuses on improving legal, institutional, and operational frameworks at a time when government systems are increasingly reliant on digital platforms for service delivery, payments, and identity management.

The launch follows a major coordinated cyberattack less than a year ago that knocked multiple government websites offline, exposing serious weaknesses in public digital infrastructure. Critical platforms including State House, several key ministries, immigration systems, and county government portals were affected, raising concerns not only about technical security gaps but also about reputational risk, public trust, and national security as Kenya continues to scale e-government services.

Recent data highlights the urgency of the response, with cyber-related losses estimated at nearly KSh30 billion in the past year as attacks become more sophisticated and financially damaging. Online and email fraud remain dominant, while attackers are increasingly using AI-driven techniques to combine phishing, credential theft, and ransomware across both public and private sector systems, stretching the capacity of existing cyber response structures.

The KCR project is structured around strengthening laws and institutions, boosting operational readiness for cyber incident prevention and response, and promoting public awareness and digital trust. Funded by the European Union and implemented by Expertise France in partnership with Estonia’s development agency, the initiative aims to build a more coordinated national cybersecurity ecosystem that supports Kenya’s digital economy while protecting citizens, public services, and critical infrastructure.