Cyber Risk Management for SMEs
You don't need an enterprise budget to think like one — a practical five-step framework.
Insights
Cybersecurity, explained for the Kenyan context
Direct answers, not padded word counts. Every article opens with the answer to its own question, then goes as deep as the topic actually needs — practical guidance on cybersecurity risk, financial-sector security, secure software and digital growth.
Beyond SEO: What Is GEO, AEO, and Why Your Brand Must Show Up in AI Answers
Google is no longer the only doorway to the internet — what GEO and AEO actually mean.
DevSecOps: Why Security Must Be Embedded from Day One
The three pillars of DevSecOps, and what a real security pipeline actually looks like.
ISO 27001 Certification: A Practical Roadmap for Kenyan Organisations
The six-stage journey to certification readiness — and what RETIS does and doesn't do in that process.
Cloud Security Fundamentals: Azure, AWS, and GCP
The Shared Responsibility Model, and five practical controls every organisation should apply.
Digital Brand Protection: How to Safeguard Your Online Reputation
Impersonation, domain squatting, fake reviews — where digital marketing and cybersecurity meet.
Kenya's New Cyber Café Rules Take Effect August 14, 2026
New CA licensing conditions require customer registration and session logging. What's required, what isn't, and how operators should prepare.
How to Prepare for a Cybersecurity Audit in Kenya
A step-by-step guide — what to gather, what to fix first, and common mistakes organisations make.
What is a Cybersecurity Risk Assessment?
A direct-answer explainer covering scope, methodology and how often to run one.
Vulnerability Assessment vs Penetration Testing
The two are often confused — here's what actually separates them and when to use each.
What Cybersecurity Risks Do Kenyan SACCOs Face?
Governance, member data and third-party risk patterns specific to the Kenyan SACCO sector.
What Should a Cyber Risk Register Contain?
A practical checklist for building or auditing your organisation's risk register.
What is Security by Design?
Why building security in from architecture onward beats bolting it on after launch.
How Often Should an Organisation Conduct a Cyber Risk Assessment?
Cadence guidance by sector and risk profile — and why 'once' isn't enough.
What Cybersecurity Compliance Actually Means in Kenya
Untangling risk assessment, gap assessment, readiness advisory and statutory audit.
What is DevSecOps?
Bringing security into the development pipeline itself, not just the final review.
How AI Answer Engines Choose What to Cite
What Generative Engine Optimisation actually means, and why structure matters as much as content.
Original Research
Looking for deeper, data-backed research?
The Kenya Cyber Risk Intelligence programme is RETIS's ongoing original research effort — sector-specific reports built from real Kenyan context and properly sourced evidence, not imported global templates with the country name swapped in.