KENYA · GUIDE 0600 · EDITION 4.2
Small business cybersecurity training in Kenya: Customers and Market Demand
The buyer and the buying decision
Small employers and owner-managed businesses. The offer to test is: Teach small-business cybersecurity awareness using safe examples.
Train staff on the business's actual account, payment, device, and reporting practices, using safe examples and a named escalation route for suspicious requests.
Separate interest from an accepted order
Run a short session on one practical risk using fictional messages.
The purpose of this test is to establish whether the buyer accepts the specified result, delivery arrangement and payment terms. An encouraging interview does not establish repeat demand. Ask what the buyer currently uses, what would make them change supplier and who has authority to approve the first order. Record a refusal as carefully as an enquiry so that unsuccessful offers do not disappear from the evidence.
Collect evidence specific to this offer
Record participant decisions, misunderstood examples, verification barriers, reporting confidence, owner process gaps, and agreed follow-up actions that make safer daily business behaviour possible.
| Question to resolve | Evidence to retain |
|---|---|
| What exactly will the buyer accept? | Ask participants to examine realistic messages and payment-change requests, explaining their verification decision and reporting action without interacting with any live malicious content. |
| What is included in the first trial? | Train staff on the business's actual account, payment, device, and reporting practices, using safe examples and a named escalation route for suspicious requests. |
| How will a prospect see the offer? | Approach business groups with a practical agenda and explicit non-testing boundaries. |
| What must happen before repeating the trial? | Participants know the agreed reporting and account-safety actions; no security guarantee is made. |
Decide whether to continue
Review the specification with the buyer before committing to tools or stock. A trial is commercially useful only if actual costs, rejected work, time spent and cash collected can be reconciled. Training misses its purpose when staff memorize warning signs but still have no practical way to verify an urgent payment instruction from apparent management.
If a buyer changes the required output, record a new scope and re-cost the test. Do not count a request for a different product as proof of demand for the original one. Keep personal contact details in your private records and use customer statements publicly only with permission.
Turn the example into a buyer test
Fictional cyber-awareness CYB-100 is a 90-minute session for eight staff using three harmless exercises: identify a suspicious payment-change request, practise reporting it through an approved internal channel and explain recovery from a backup. A fictional email asks to change bank details urgently; it contains no live link or credential form. Security testing, phishing campaigns against employees, incident response and certification are excluded.
| Buyer discussion | Evidence to retain |
|---|---|
| Specification to confirm | Training does not invent a hotline or promise the trainer can investigate incidents. |
| Output to inspect | Record observed understanding and gaps, not a claim the business is secure. |
| Failure that can defeat acceptance | Staff rely on logo to trust email |
Ask the buyer to describe one acceptable and one unacceptable result. Record the decision maker, price basis, quantity, handover point and payment date privately. A sample request, an encouraging conversation and an accepted order are different evidence. Keep the first commitment within your demonstrated capacity; no customer interview or successful trial is asserted here.
What a failed test should change
Review verification exercise.. If the offer cannot meet that check, revise the specification or process before promising a repeat. Keep rejected offers and reasons in the same register as positive replies so that your record does not exaggerate demand.