KENYA · GUIDE 0600 · EDITION 4.7
Small business cybersecurity training in Kenya: Startup Budget and Quotation Checklist
Editorial update: 28 October 2026 · Business planning reference · Review scope
Define what must be funded before the first order
Build a startup quotation schedule for Owner procedure sheet, Harmless exercise pack, Demonstration account; separate setup, operating inputs and working cash.
This is a planning reference for small business cybersecurity training. The order below is an invented teaching case. It is not a completed customer job, an operating approval or a prediction of demand or earnings.
The example offer and its boundary
Fictional cyber-awareness CYB-100 is a 90-minute session for eight staff using three harmless exercises: identify a suspicious payment-change request, practise reporting it through an approved internal channel and explain recovery from a backup. A fictional email asks to change bank details urgently; it contains no live link or credential form. Security testing, phishing campaigns against employees, incident response and certification are excluded.
A quotation checklist for this business
| Resource | Exact request to price | Check before accepting the quote |
|---|---|---|
| Owner procedure sheet | Named reporting/payment-verification owners. | Confirm contacts are current. |
| Harmless exercise pack | Three fictional scenarios and answer notes. | Check no live credentials/links. |
| Demonstration account | Disposable approved examples. | No production settings changed during class without separate authority. |
Keep the budget categories separate
- Owner procedure sheet: Named reporting/payment-verification owners. Confirm the quantity, landed quote and confirm contacts are current.
- Harmless exercise pack: Three fictional scenarios and answer notes. Confirm the quantity, landed quote and check no live credentials/links.
- Demonstration account: Disposable approved examples. Confirm the quantity, landed quote and no production settings changed during class without separate authority.
- Record equipment acquisition OR an appropriate use allocation, plus the full stock/minimum-order cash requirement; do not count both as the same per-job expense.
- Obtain actual labour, premises, transport, energy/water, rework, payment and ongoing overhead amounts relevant to this activity. Identify deposits, receivables and payment dates separately.
- Resolve the guide-specific evidence gaps listed in section 10. Any activity-specific permission, testing or specialist costs require actual scope and quotations, not an invented allowance.
What the selected teaching bill includes
| Selected line | Example quantity | Assumed rate | Selected cost |
|---|---|---|---|
| Preparation hours | 3 | KSh 550.00 | KSh 1,650.00 |
| Delivery hours | 1.5 | KSh 700.00 | KSh 1,050.00 |
| Eight workbooks pages | 24 | KSh 10.00 | KSh 240.00 |
| Owner debrief hours | 0.5 | KSh 550.00 | KSh 275.00 |
These selected lines total KSh 3,215.00. They are a fictional operating example, not the full cash needed to start small business cybersecurity training. Illustrative cost is 1,650+1,050+240+275=3,215, or 401.88 per attendee. Eight assumed 600 fees yield 4,800 and 1,585 pre-tax planning surplus. Venue, security tools, implementation, incident work and tax are excluded.24 pages are three per learner. No attack simulation, vulnerability scan or measured risk reduction is claimed from classroom attendance.
Close the budget before spending
For each actual quotation, record the delivered quantity, specification, cash due date, hire/purchase option and quote expiry. Keep an unknown cost blank. Reusable equipment purchase, an appropriate use allocation and refundable deposits are different records; do not count the same item twice.
- Actual policies, staff practice and security state unverified.
- Not a security audit/certification; no phishing messages sent.
References and their limits
Small organisations guide to cyber security — NCSC
Defensive small-business account/device/backup/scam guidance, not a security certification. Reference check recorded 2026-10-26.
Rights Of A Data Subject
Kenyan privacy principles and data minimisation; not a complete compliance assessment. Reference check recorded 2026-10-26.
Connect domain DNS records — Microsoft 365
Mailbox preparation before MX change and tenant-specific DNS records. Reference check recorded 2026-10-26.
Recorded references support only the scope stated beside them. They do not prove current supplier stock, a local quotation, actual buyer demand, operator competence or the feasibility of this particular business. Later editorial changes do not refresh earlier source-check dates.
Prepared by Business Starter Guides using AI-assisted drafting and desk editorial checks. Independent operator trials and specialist certification are not claimed. See the editorial method for the review scope.
Editorial method and evidence limits