The Central Bank of Kenya (CBK) has rolled out stricter cybersecurity requirements to safeguard financial systems. To drive this, it has launched the Banking Sector Cybersecurity Operations Centre (BS-SOC)—a new hub for detecting threats, coordinating incident response, and running digital forensics.

BS-SOC is part of the 2024 Computer Misuse and Cybercrime Regulations and CBK’s 2024-2027 Strategic Plan. Managed by the CBK Cyber Fusion Unit, it offers cyber-threat intelligence, incident response, and investigations.

All regulated financial institutions must now:

• Follow both the new CBK guidelines and CMCA rules.
• Report cyber incidents to BS-SOC within set timelines.

CBK warns that full industry cooperation is critical as digital banking growth has exposed banks, SACCOs, and other players to rising cybercrime.

The latest CBK Financial Sector Stability Report shows Kenyan banks lost over Sh1.5 billion to cyber and tech fraud, with mobile banking hit hardest (Sh810 million stolen last year).