Key takeaways
- Cyber attacks on Kenyan SMEs are rising, and most succeed through weak passwords, outdated software and phishing.
- Secure your network with business-grade routers, separate guest Wi-Fi and firewalls.
- Keep your website updated, backed up, on SSL and on reliable hosting.
- The Data Protection Act requires you to protect personal data and report serious breaches.
In this guide
As Kenyan businesses move sales, payments and records online, cyber criminals follow. Phishing emails, hacked websites, ransomware and SIM-swap fraud hit SMEs as well as large companies. The good news: a few essential practices block most attacks.
Secure your network
- Use business-grade routers and change default passwords.
- Separate staff, guest and CCTV networks.
- Enable a firewall and keep firmware updated.
- Use structured cabling and a secure server or network cabinet. See our networking services.
Protect your website
- Install an SSL certificate (https) on every page.
- Update WordPress, themes and plugins regularly.
- Use strong admin passwords and two-factor authentication.
- Run daily backups stored off the server.
- Choose reliable, secure hosting. Read our hosting guide.
- Monitor uptime and malware with a maintenance plan.
Safeguard your data
- Collect only the personal data you need.
- Limit staff access by role.
- Encrypt laptops and phones and enable remote wipe.
- Comply with the Kenya Data Protection Act and register with the ODPC where required.
Train your people
Most breaches start with a click. Teach staff to spot phishing, fake M-Pesa messages and suspicious links, and never to share passwords or OTPs.
Plan for the worst
- Keep tested backups of critical systems.
- Write a simple incident response plan.
- Know who to call: your IT partner, bank and the ODPC.
Quick security checklist
- SSL and updates on your website: yes or no?
- Two-factor authentication on email and admin accounts?
- Daily off-site backups?
- Separate guest Wi-Fi?
Permalink Business Ltd. helps Kenyan businesses with websites, software, SEO, networking and security. Request a free quote today.
Frequently asked questions
Are small businesses really targeted by hackers?
Yes. Small businesses are often targeted precisely because their defences are weaker. Automated attacks scan every website and network.
How often should my website be backed up?
Daily automatic backups stored off the server are recommended, especially for online shops and sites with frequent updates.
What does the Kenya Data Protection Act require?
Businesses that collect personal data must process it lawfully, keep it secure, respect data subjects' rights and, where required, register with the ODPC.
A Nairobi IT company helping Kenyan businesses grow with websites, software, marketing, networking and security. Our guides are written from real client projects.
