LegislationGazette notice
Gazette Notice No. 5589 of 2025
A legislation notice.
Official PDF · 1.7 MB
Whole issue, from Kenya Law. This notice starts on printed page 1964.
AI-extractedAgreement between models, not verified accuracy.
Items 3
-
Legislation notice 1
Link- Issuing authority
- Cabinet Secretary for Information, Communications and the Digital Economy
- Body
- Ministry of Information, Communications and the Digital Economy
- Instrument
- The Kenya Cloud Policy, 2025
-
Legislation notice 2
Link- Data centre
- Ruaraka GDC (national data centre hosting MCDA data), Konza National Data Centre (national data centre hosting MCDA data)
- Effective
- immediately upon publication, with a 12-month grace period for compliance
-
Assign governance roles under the kenya cloud policy 3
Link- Body
- Ministry of Information, Communications and the Digital Economy (Policy Body), Cloud Adoption Committee (Cloud Adoption Committee, multi-agency committee), Principal Secretary responsible for ICT (constitutes the Cloud Adoption Committee), National Computer and Cybercrime Coordination Committee (Security Body), ODPC (National Data Management Office), National Data Management Office
- Issuing authority
- Cabinet Secretary for Information Communication and the Digital Economy
- Effective
- upon its publication in the Kenya Gazette
Schedule 36 rows
| AU | African Union |
| BETA | Bottom-up Economic Transformation Agenda |
| CapEx | Capital Expenditure |
| CSC | Cloud service customer |
| CSP | Cloud service provider |
| DPA | Data Protection Act |
| GDC | Government Data Center |
| GoK | Government of Kenya |
| IaaS | Infrastructure as a service |
| IT | Information Technology |
| ITU | International Telecommunication Union |
| ISO | International Organization for Standardization |
| IEEE | Institute of Electrical and Electronics Engineers |
| ISP | Internet Services Provider |
| MCDA | Ministry, County, Department, Agency |
| MICDE | Ministry of Information, Communications and The Digital Economy |
| MISS | Minimum Information Security Standards |
| NCSS | National Cyber Security Strategy |
| NIST | National Institute of Standards and Technology |
| NGO | Non-Governmental Organisation |
| OpEx | Operation Expenditure |
| ODPC | Office of the Data Protection Commissioner |
| PaaS | Platform as a service |
| PII | Personally Identifiable Information |
| PS | Permanent Secretary |
| SaaS | Software as a service |
| SLA | Service level agreement |
| SWOT | Strength Weakness Opportunity and Threat |
| TCO | Total Cost of Ownership |
| VM | Virtual Machine |
| S/No. | Item | Responsible Organ | Roles |
|---|---|---|---|
| 1 | Policy Body | Ministry of Information, Communications and the Digital Economy. | • Defining the objectives and scope of the Kenya Cloud Policy. • Setting the guidelines for the Policy and publishing. • Defining the roles and responsibilities of the different involved entities, in the context of the Cloud Policy. • Updating and adjusting the Kenya Cloud Policy when required. • Development of policies to attract CSPs to invest in Kenya. |
| 2 | Cloud Adoption Committee | Multi-agency committee to be constituted by the Principal Secretary responsible for ICT. Committee shall comprise of representatives from both the public and private sectors. | • Oversee cloud adoption across the different entities through pilots and supporting Entities during the migration process with technical and commercial expertise. • Checking the cybersecurity, technical and commercial requirements. • Handling accreditation of Cloud services offered to entities. • Administrating the Marketplace that will connect Cloud suppliers with the buyers. • Ensuring standards and interoperability compliance. • Approving entities to host internally as per paragraph 3.2 (c) (Statements) • Take inventory, classify and categorise the types of data. |
| 3 | Security Body | National Computer and Cybercrime Coordination Committee (NC4) and any other body tasked with the mandate of cybersecurity | • Issuing the cloud cybersecurity controls and guidelines based on existing regulations while checking the compliance with these controls. |
| 4 | Cloud Service Providers (CSPs) | CSP | • Providing the Cloud computing services in its different forms: public, Gov-Cloud and private. Includes international as well as local players |
| 5 | National Data Management Office | This will include ODPC and other bodies dealing with data | • Manage, govern, digitize and grow the national data to empower the national assets and capabilities. • Also, protect the personal and sensitive data by setting strategies, policies, regulations and the required controls, implement it and monitor the compliance against it. • Establish data classification Policy, enable its application and ensure compliance with it. |
| 6 | Entities | All entities as defined in ‘Scope of the Policy’ section. These entities are buyers of Cloud services. | • All the entities mentioned above will ensure continuous and transparent collaboration to drive the Cloud adoption. |
Everyone named
Pages for private people, including the deceased and petitioners, are public, but we ask search engines not to list them.
Corrections 0
- Corrected by
- No corrigendum in the issues we hold.
- Refers to
- No other notices.
Cite
Kenya Gazette Notice No. 5589 of 2025, Vol. CXXVII No. 83, 2 May 2025, p. 1964.Permalink funua.com/notices/2025/5589/.
About this data
- Source
- Official PDF of Vol. CXXVII No. 83, from Kenya Law
- Extracted by
- AI models
- Model audit
- An independent model agreed with 98 to 99% of compared values for land and succession notices, 97% overall. Agreement between models, not verified accuracy.
- Review flag
- None on this notice
Filed under: Legislation, 2025 · May 2025 · Vol. CXXVII No. 83