IRA Visits KE-CIRT/CC to Gain Insights on Establishment of Security Operations Centre

The Insurance Regulatory Authority (IRA) on Wednesday visited the National Kenya Computer Incident Response Team – Coordination Centre (KE-CIRT/CC) to gain insights into establishing and operating a Security Operations Centre (SOC), as part of efforts to strengthen cybersecurity in the insurance sector.

The visit was informed by the Computer Misuse and Cybercrimes Act, 2018, and its implementation framework, which provide for sector regulators to establish mechanisms for enhancing cybersecurity and responding to cyber threats. In line with this, IRA is working towards establishing its own SOC. The SOC will enhance the protection of the information systems and digital infrastructure that support the delivery of insurance services across the country.

Dr. Banchale Gufu, Assistant Director, Cybersecurity at the Communications Authority of Kenya, which hosts KE-CIRT/CC, noted that the Centre’s experience and maturity over the years make it a valuable knowledge-sharing resource for institutions seeking to strengthen their cybersecurity capabilities.

She observed that the engagement would provide IRA with practical insights into cybersecurity best practices, cyber incident detection and response, threat intelligence sharing, and the regulatory frameworks needed to establish and operate an effective SOC.

The engagement also gave the two institutions an opportunity to exchange experiences and explore areas of collaboration to strengthen cybersecurity resilience, particularly against emerging cyber threats targeting critical information systems.

The IRA delegation was led by Dr. Fredrick Bitta, Head of Cybersecurity at IRA, who expressed the Authority’s interest in leveraging KE-CIRT/CC’s experience to inform the development and operationalisation of its SOC.