What is a Cybersecurity Risk Assessment?
A direct-answer explainer covering scope, methodology and how often to run one.
Insights
Cybersecurity, explained for the Kenyan context
Direct answers, not padded word counts. Every article opens with the answer to its own question, then goes as deep as the topic actually needs — practical guidance on cybersecurity risk, financial-sector security, secure software and digital growth.
Vulnerability Assessment vs Penetration Testing
The two are often confused — here's what actually separates them and when to use each.
What Cybersecurity Risks Do Kenyan SACCOs Face?
Governance, member data and third-party risk patterns specific to the Kenyan SACCO sector.
What Should a Cyber Risk Register Contain?
A practical checklist for building or auditing your organisation's risk register.
What is Security by Design?
Why building security in from architecture onward beats bolting it on after launch.
How Often Should an Organisation Conduct a Cyber Risk Assessment?
Cadence guidance by sector and risk profile — and why 'once' isn't enough.
What Cybersecurity Compliance Actually Means in Kenya
Untangling risk assessment, gap assessment, readiness advisory and statutory audit.
What is DevSecOps?
Bringing security into the development pipeline itself, not just the final review.
How AI Answer Engines Choose What to Cite
What Generative Engine Optimisation actually means, and why structure matters as much as content.
Original Research
Looking for deeper, data-backed research?
The Kenya Cyber Risk Intelligence programme is RETIS's ongoing original research effort — sector-specific reports built from real Kenyan context and properly sourced evidence, not imported global templates with the country name swapped in.