INFORMATION SECURITY POLICY STATEMENT

The Central Bank of Kenya is committed to protecting the confidentiality, integrity, and availability of information entrusted to it, as well as the security and resilience of its digital services.

The Central Bank of Kenya recognizes that information security is fundamental to maintaining the trust of its’ customers, partners, and the public, and has implemented and maintained appropriate governance, administrative, technical, and physical security measures guided by applicable legal, regulatory requirements, and internationally recognized standards to safeguard information assets against unauthorized access, disclosure, alteration, or destruction. The Central Bank of Kenya shall establish and periodically review information security objectives aligned with this policy and the Bank’s strategic direction.

The Central Bank of Kenya is committed to:

1. Ensuring the availability and resilience of its’ critical systems and services.
2. Providing information security awareness and training to its’ workforce.
3. Protecting information from unauthorized access, use, disclosure, or destruction.
4. Complying with applicable information security, privacy, and data protection legal and regulatory requirements.
5. Continuously monitoring, reviewing, and improving its’ controls and capabilities.
6. Promptly investigating, responding, and managing information security incidents.

The Central Bank of Kenya also encourage its’ partners, the public, and other stakeholders to use its’ digital services responsibly, protect their digital identities, and report any suspected security incidents or vulnerabilities through its’ official communication channels.

Through these commitments, the Central Bank of Kenya strives to maintain a secure, resilient, and trusted environment that supports the delivery of its services and protects the interests of its’ stakeholders.