Cyberox helps organizations in Kenya comply with the Data Protection Act, 2019, implement ISO 27001, and test their security through VAPT — delivered remotely with on-site visits where needed.
Organizations handling personal data in Kenya operate under the Data Protection Act, 2019, overseen by the Office of the Data Protection Commissioner (ODPC). Financial institutions and critical sectors face additional sector-specific expectations.
Kenya's Data Protection Act establishes data-subject rights and obligations for data controllers and processors, enforced by the Office of the Data Protection Commissioner (ODPC). We provide gap assessments and compliance implementation support.
Certain data controllers and processors in Kenya are required to register with the ODPC. We help organizations determine registration requirements and prepare the necessary documentation.
ISO/IEC 27001 provides a structured framework for information security management, widely recognized by Kenyan enterprises and their international partners and customers.
Vulnerability assessment and penetration testing for organizations in Kenya's growing technology, financial services, and telecoms sectors.
Full ISO 27001:2022 implementation and certification support, including alignment with local regulatory requirements.
Learn moreUnderstand where you stand against the applicable frameworks before committing to a full engagement.
Learn moreFractional CISO leadership for organizations that need senior security guidance without a full-time hire.
Learn moreBook a free scoping call. We'll identify which frameworks apply to your organization and give you a clear compliance roadmap.