The Communication Authority of Kenya (CA) issued directive to all Critical Information Infrastructure (CII) providers in telecommunication sector to comply with new digital certification standards by January 1,2026.

In a public notice, CA demands every sector in telecommunications industry to comply with its rules and regulations.

This is line with the determination made by the National Computer and Cybercrimes Coordination Committee (NC4) on August 1, 2024.

“All systems that are designated as Critical Information Infrastructure (CII) as stipulated in Gazette Notice No. 1043,  must adopt and only use digital certificates, digital certification and Public Key Infrastructure (PKI) services from Electronic Certification Service Providers (E-CSPs) who have been both licensed and accredited by the Communications Authority of Kenya,” read part notice.

CA to Conduct Inspections

CA said it will inspect the relevant licenses to ensure compliance with this directive is effectively initiated.

Failure to comply to this direction will be termed as violation of the CA’s rules and regulations and will attract penalities and disciplinary measures as outlined in the CA’s relevant laws and regulatory frameworks.

The list of licensed and accredited E-CSPs can be obtained from the Telecommunications Services Licensee Register available at CA’s website.

Role of Communication Authority of Kenya

Kenya crafted CA to be the regulatory agency for the ICT industry which includes telecommunications, cyber security, e-commerce, broadcasting and postal/courier services.

Additionally, CA has also the responsibility to manage the country’s numbering and frequency spectrum resources, administering the Universal Service Fund (USF) as well as safeguarding the interests of users of ICT services.

Communication Authority of Kenya public notice. PHOTO/CA X