KENYA · GUIDE 0600 · EDITION 4.2
Small business cybersecurity training in Kenya
Teach small-business cybersecurity awareness using safe examples.
A CONCRETE EXAMPLE · ILLUSTRATIVE
Fictional cyber-awareness CYB-100 is a 90-minute session for eight staff using three harmless exercises: identify a suspicious payment-change request, practise reporting it through an approved internal channel and explain recovery from a backup. A fictional email asks to change bank details urgently; it contains no live link or credential form. Security testing, phishing campaigns against employees, incident response and certification are excluded.
Who is the first customer?
Small employers and owner-managed businesses.
Test the offer
Run a short session on one practical risk using fictional messages.
What your operating pack contains
- A business-specific operating guide PDF
- Offline itemised costing and quotation tool
- Supplier request and sales message drafts
- Job-card and quality-response documents
- Offline operations desk: supplier comparison, work checkpoints, accepted deliveries and cash tracking
- Cashflow and launch review: downside scenarios, break-even, 13-week cash plan and trial decision
- Source register and unresolved checks
Delivery and quality
Participants know the agreed reporting and account-safety actions; no security guarantee is made.
Cost drivers
- preparation
- group size
- materials
Use your own supplier quotations. Worked figures in the pack are illustrative and do not establish a verified startup budget or profit forecast.
Evidence and scope
Small organisations guide to cyber security — NCSC ↗
Defensive small-business account/device/backup/scam guidance, not a security certification. · Checked 2026-10-26
Rights Of A Data Subject ↗
Kenyan privacy principles and data minimisation; not a complete compliance assessment. · Checked 2026-10-26
Connect domain DNS records — Microsoft 365 ↗
Mailbox preparation before MX change and tenant-specific DNS records. · Checked 2026-10-26