KENYA · GUIDE 0600 · EDITION 4.7
Small business cybersecurity training in Kenya: Equipment and Supplier Buying Checks
Editorial update: 28 October 2026 · Business planning reference · Review scope
Purchase for the required result
Compare Owner procedure sheet, Harmless exercise pack, Demonstration account by specification, compatibility and buying checks, before comparing prices.
This is a planning reference for small business cybersecurity training. The order below is an invented teaching case. It is not a completed customer job, an operating approval or a prediction of demand or earnings.
The example offer and its boundary
Fictional cyber-awareness CYB-100 is a 90-minute session for eight staff using three harmless exercises: identify a suspicious payment-change request, practise reporting it through an approved internal channel and explain recovery from a backup. A fictional email asks to change bank details urgently; it contains no live link or credential form. Security testing, phishing campaigns against employees, incident response and certification are excluded.
The resource brief to send for quotations
| Resource | Required variant or quantity | Inspection or document check |
|---|---|---|
| Owner procedure sheet | Named reporting/payment-verification owners. | Confirm contacts are current. |
| Harmless exercise pack | Three fictional scenarios and answer notes. | Check no live credentials/links. |
| Demonstration account | Disposable approved examples. | No production settings changed during class without separate authority. |
Use the delivery checkpoints to check suitability
| Planning stage | Acceptance evidence to agree |
|---|---|
| Define business procedures | Training does not invent a hotline or promise the trainer can investigate incidents. |
| Prepare safe examples | No staff password, code or customer record is collected. |
| Teach independent verification | Good grammar/logo alone cannot prove authenticity. |
| Practise account/backup decisions | Staff enrol their own factors privately; no trainer retains recovery codes. |
| Assess the three tasks | Record observed understanding and gaps, not a claim the business is secure. |
Compare like with like
Request the same specification, unit/pack size, usable quantity, destination, lead time and support terms from each supplier. Keep an unmatched lower-priced variant separate. A supplier’s photograph, headline price or description does not establish that the delivered item fits this order.
Goods received record
| Field | What to enter for this offer |
|---|---|
| Quote and delivery reference | Exact supplier quote and date, plus the receiving document |
| Item match | Confirm contacts are current. |
| Quantity and condition | Count or measure the actual received lot; keep mismatches separate |
| Release decision | Record observed understanding and gaps, not a claim the business is secure. |
| Unresolved evidence | Actual policies, staff practice and security state unverified. |
Do not use an item with an unresolved suitability question for work that depends on that question. Obtain the relevant competent assessment rather than treating this checklist as technical approval.
References and their limits
Small organisations guide to cyber security — NCSC
Defensive small-business account/device/backup/scam guidance, not a security certification. Reference check recorded 2026-10-26.
Rights Of A Data Subject
Kenyan privacy principles and data minimisation; not a complete compliance assessment. Reference check recorded 2026-10-26.
Connect domain DNS records — Microsoft 365
Mailbox preparation before MX change and tenant-specific DNS records. Reference check recorded 2026-10-26.
Recorded references support only the scope stated beside them. They do not prove current supplier stock, a local quotation, actual buyer demand, operator competence or the feasibility of this particular business. Later editorial changes do not refresh earlier source-check dates.
Prepared by Business Starter Guides using AI-assisted drafting and desk editorial checks. Independent operator trials and specialist certification are not claimed. See the editorial method for the review scope.
Editorial method and evidence limits