Kenya’s Communications Authority (CA) has issued a significant directive requiring firms that handle critical services to register their web addresses with Kenyan internet domains (.ke) within the next six months. Announced on August 1 by CA Director-General David Mugonyi, this decision is aimed at enhancing cybersecurity for essential national infrastructure.
The mandate arises from a meeting of the National Computer and Cybercrimes Coordination Committee (NC4) held on March 14. The NC4, a multi-agency body, is tasked with coordinating national cybersecurity efforts and facilitating international cooperation to tackle computer and cybercrimes in Kenya.
The directive encompasses a broad spectrum of critical entities, including mobile communication and internet connectivity providers, judicial institutions, the national electoral body, and security agencies. It also extends to national health institutions, food quality and safety authorities, aviation systems, railway and road transport support services, power generation and transmission infrastructure, and other vital services.
Mugonyi stressed that these organizations must ensure the security and reliability of their .ke domain names. Despite the directive, several major organizations have yet to comply. For instance, Airtel Kenya, Kenya Airways, and the Kenya Seed Company are still using .com domains, while the Kenya Agricultural & Livestock Research Organisation (KALRO) continues to operate under a .org domain.
Proponents of adopting local domains argue that they offer several benefits, including easier access to target markets, enhanced interaction with specific regions, and improved control and security oversight. The Kenya Network Information Centre (KeNIC) manages the registration and issuance of .ke domains, and recent data from the CA indicates a growth in local domain adoption. In the first quarter of 2024, the number of registered .ke domains increased by 2.3%, from 105,936 in December 2023 to 108,338, with the .co.ke sub-domain commanding the largest market share at 84.8%.
This initiative aligns with a global trend of localizing critical digital infrastructure to bolster national cybersecurity. By mandating the use of .ke domains for essential services, Kenya seeks to create a more manageable and secure online environment for its critical services.
The six-month deadline underscores the urgency of implementing this change, which may also impact international businesses operating critical services in Kenya, necessitating adjustments to their online presence to comply with the new requirements.
