Kenya’s Vision: Building a Cybersecure Code Nation

The East African nation of Kenya plans to become a “Code Nation,” aiming to boost its adoption of generative AI over the next five years and adding more than 1 million technology specialists to its digital-focused workforce, including software engineers, cybersecurity specialists, and data scientists.

The effort to train a digital workforce is one facet of the Code Nation initiative, which also aims to connect 99% of the population with high-speed digital fiber networks, John Kipchumba Tanui, principal secretary in the State Department for Information and Communications Technology (ICT) and the Digital Economy, said at the Kenya Software and AI Summit.

“The continent stands at the precipice of a structural economic shift, driven by software and artificial intelligence, that promises to redefine its place in the world,” he said. “The question is not if Africa will participate, but who will lead its charge. Kenya has chosen to step forward.”

The Code Nation effort marks the latest initiative by Kenya’s government to chart a secure course to a digital-enabled future. In 2024, Kenyan President William S. Ruto committed to the Framework for Responsible State Behavior in Cyberspace — an existing agreement between several European, North American, and Asian countries — during a visit to the US. Kenya is also one of the most recent nations to be invited to sign onto the Budapest Convention on Cybercrime, a treaty that allows countries to cooperate in investigating and prosecuting cybercrime and predates the more recent, controversial United Nations Convention Against Cybercrime.

Related:China Imposes One-Hour Reporting Rule for Major Cyber Incidents

Ambitious Aims, Hard Challenges

By 2027, Kenya plans to have 100,000 km of optical fiber deployed, up from 37,313 km today, according to PS Tanui’s statement. In the past three years, the country nearly doubled the number of fixed broadband connections, standing at 2.14 million today.

Yet, the fast pace of digital transformation comes with real cyber-risks — an area where Kenya could lead the region, says Edrine Wanyama, legal officer for the Collaboration on International ICT Policy for East and Southern Africa (CIPESA), based in Uganda.

“Digital transformation and social-economic development aided by technology could be met with major barriers that will, in turn, undermine the digital economy,” he says. “Robust cybersecurity by Kenya would be a litmus for its regional counterparts to take progressive steps to ensure digital security preparedness and resilience in the advent of technological innovations and advancements.”

Related:Prep is Underway, But 2026 FIFA World Cup Poses Significant Cyber Challenges

Private industry has a major role to play, not only in helping develop the infrastructure but also in training technology and cybersecurity specialists in the necessary skills. Already, Amazon, Google, and Microsoft have made ambitious plans for the region. Microsoft, for example, has kicked off its Advancing Regional Cybersecurity (ARC) initiative, which aims to improve regional cybersecurity coordinations, preparedness, and skills. The company has worked with Kenya’s National Computer and Cybercrime Coordination Committee (NC4) as a partner.

Because technology firms and infrastructure providers are often the first to encounter cyberthreats, they are also the first line of defense and a source of knowledge about the threat landscape, says Kerissa Varma, chief security adviser for Africa at Microsoft.

“While governments are responsible for setting legal and regulatory frameworks, it is often the private sector that leads in innovation, threat detection, and capacity building,” she says. “Ultimately, sustainable progress in cybersecurity requires a coordinated approach, and the private sector is indispensable in shaping both the strategic direction and practical implementation of cyber defenses in East Africa and across the continent.”

Related:Czech Warning Highlights China Stealing User Data

Taking the Right Steps

So far, Kenya seems to be taking the right steps. The national government updated the 2022 Kenyan Cybersecurity Strategy for 2025, aiming to make a safe and trusted cyberspace for its citizens and to create a secure ecosystem for its growing digital economy. A handful of other African nations — including Egypt, Ghana, Mauritius, Morocco, Nigeria, Tanzania, and Tunisia — are taking an aggressive approach to cybersecurity as well.

Modernizing law enforcement investigative and prosecutorial capabilities should be a primary focus, says CIPESA’s Wanyama.

“They are still stuck in traditional crime and the traditional ways of handling crime,” he says. “Additionally, finances are inadequate, training and skills are lacking, while access to specialized tools for cyber crimes are not readily available.”

Kenya has taken part in several pan-African organizations aimed to solve such problems, including the African Joint Operation against Cybercrime (AFJOC) project and the African Union Mechanism for Police Cooperation (AFRIPOL). Other efforts aim to bring together cyber incident response capabilities and governance to allow better cooperation across borders.

Such efforts show that Kenya has a growing dedication to fighting cybercrime and improving the digital security of its citizens, says Microsoft’s Varma.

“Investing in AI and cybersecurity skills will ensure that Kenya remains competitive in the global market,” she says. “By developing a skilled workforce, the country can attract international investments and partnerships, positioning Kenya as a regional leader in the digital economy.”