Practical guidance, not noise

Field notes from our consultants on protecting data, managing access, detecting threats and meeting regulation in Africa and the Gulf.

Latest

Articles

Incident response

The first hour of a ransomware attack: what to do, and what not to

The decisions made in the first hour shape how much an incident costs. A practical checklist for IT and security leads.

5 min read · 22 October 2026

Identity

Shared admin passwords: why privileged access is the first thing to fix

Attackers who reach an administrator account can reach everything. How privileged access management closes the gap, and where to start.

4 min read · 22 October 2026

Data protection

Choosing a DLP approach: four questions to answer first

Data loss prevention projects fail when the tool is chosen before the problem is understood. Four questions that point to the right approach.

4 min read · 22 October 2026

Regulation guides

The rules our clients answer to

Plain-language summaries of what each regulation expects, and which controls help.

KenyaKenya Data Protection Act, 2019Security safeguards, 72-hour breach notification, impact assessments, registration and cross-border rules for anyone processing personal data in Kenya.Read the guide

KenyaCentral Bank of Kenya cybersecurity guidanceBoard accountability, a CISO in senior management and 24-hour incident reporting for banks, with a draft update under consultation in 2026.Read the guide

KenyaIRA Guidance Note on Cybersecurity for the Insurance IndustryBoard-level responsibility, a formal cyber risk programme and 24-hour reporting of material incidents for Kenyan insurers.Read the guide

KenyaSASRA requirements for deposit-taking SACCOsICT governance, security policies and incident reporting for SACCOs, plus SASRA's 2026 guidance on backups, monitoring and vendor risk.Read the guide

KenyaKenya Computer Misuse and Cybercrimes Act, 2018Obligations for owners of designated critical information infrastructure: reporting, annual compliance, a qualified CISO and 24-hour incident reporting.Read the guide

United Arab EmiratesUAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021)The UAE's federal data protection law: breach notification, DPOs, impact assessments and transfer rules, with executive regulations still pending.Read the guide

Download

Securebits Company Profile 2026

Our services, technology portfolio, industries, approach and representative engagements in one document. Useful for procurement files and internal approvals.