Safaricom Kenya: Urges Robust Defenses Against AI Cybersecurity Threats

• Safaricom has urged for cybersecurity to be integrated into AI development from the outset, citing new risks for businesses and users.
• Group CEO Peter Ndegwa emphasized the need for shared standards and cross-sector collaboration for responsible AI adoption.
• Kenya experienced 11.12 billion cyber threat events in the last financial year, a 29% increase from the previous year, according to CAK statistics.
• AI-driven threats like deepfakes, impersonation, automated scams, and ransomware were key discussion points at the summit.
• Safaricom offers specialized cybersecurity solutions, including SD-WAN and MSOC, to help protect micro, small, and medium enterprises (MSMEs) in Kenya.

Cybersecurity can no longer be viewed merely as a technical safeguard to be appended after a service has been developed.

Safaricom has issued a strong call for enhanced cybersecurity measures, emphasizing that digital security must be an inherent component of technological development, not an afterthought. This urgent message comes as artificial intelligence (AI) continues to introduce novel risks for both businesses and individual digital service users across Kenya. During the fourth annual Safaricom Cybersecurity Summit held in Nairobi, Group Chief Executive Officer Peter Ndegwa articulated that the responsible integration of AI necessitates robust protections, the establishment of shared industry standards, and collaborative efforts across all sectors.

Ndegwa underscored the transformative potential of AI for societal and business advancement, stressing that this opportunity must be founded on a bedrock of trust. He firmly stated that cybersecurity can no longer be viewed merely as a technical safeguard to be appended after a service has been developed. Instead, it must be intrinsically embedded from the initial stages of design and continuously fortified through standardized practices, ethical innovation, and cross-sector partnerships. The summit, convened under the theme "Harnessing AI, Strengthening Security," served as a crucial forum for stakeholders within Kenya's digital ecosystem to deliberate on these pressing issues.

The discussions at the summit delved into the dual nature of AI, exploring its growing utility in bolstering cybersecurity defenses while simultaneously acknowledging its capacity to enable increasingly sophisticated and damaging cyberattacks. Participants specifically highlighted emerging threats such as AI-generated deepfakes, advanced impersonation schemes, automated scams, and ransomware attacks, all of which pose significant challenges to digital integrity and trust. This focus on evolving threats is particularly pertinent given the documented surge in Kenya's exposure to cyber risks.

Official figures from the Communications Authority of Kenya's (CAK) National Kenya Computer Incident Response Team-Coordination Centre reveal a concerning trend. In the most recent financial year, the Centre detected an alarming 11.12 billion cyber threat events. This represents a substantial 29 percent increase compared to the 8.62 billion events recorded in the preceding year, underscoring the rapidly intensifying cyber threat landscape in the nation. Against this backdrop, attendees explored strategies for leveraging AI in threat detection, enhancing incident response protocols, and developing robust preparedness plans against ransomware. Addressing the persistent shortage of skilled cybersecurity professionals also formed a key part of these critical conversations.

A significant aspect of the summit's agenda involved emphasizing the imperative to broaden access to effective cybersecurity solutions, particularly for Kenya's micro, small, and medium enterprises (MSMEs). Safaricom highlighted the critical role MSMEs play in the national economy, noting that they contribute approximately 70 percent of Kenya's gross domestic product. As these businesses increasingly adopt digital technologies for their operations, customer engagement, and transaction management, safeguarding their digital assets, customer data, and transactional integrity becomes paramount.

To address these vulnerabilities, Safaricom offers specialized solutions tailored to meet the security needs of businesses. These include Software-Defined Wide Area Network (SD-WAN) services, which provide secure and centrally managed connectivity across multiple business locations. Additionally, the company provides a Managed Security Operations Centre (MSOC), delivering continuous threat monitoring, expert analysis, and coordinated incident response capabilities. These offerings are specifically designed to grant businesses access to enterprise-grade security infrastructure without the necessity of building and managing complex cybersecurity capabilities in-house. The fourth annual Safaricom Cybersecurity Summit continues to serve as a vital platform for fostering industry dialogue and collaborative action on digital security, stressing the need for organizations to align their AI adoption with strong security controls, improved governance, and a robust capacity to respond to the ever-changing array of cyber threats.

Lawyers and compliance officers in Kenya should advise clients on the critical need to embed robust cybersecurity measures into AI adoption strategies from the outset, given the escalating cyber threat landscape and specific risks like deepfakes and ransomware. This includes reviewing data protection policies, enhancing incident response plans, and preparing for potential regulatory or industry standard developments stemming from increased collaboration on AI security.

Source: Original reporting via Capital FM.