Kenyan officials say government sites hit by Indonesian hacker

When CIRT was alerted that the government websites were compromised, Wangusi said that CCK alerted the directorate of e-government, the entity responsible for government e-infrastructure and services.

"The intended role of any CIRT is to complement whatever intelligence the government gathers from a cybersecurity point of view. In countries where it is well-established, they have a very clear and non-ambiguous mandate," added Kamau. "That is not the case in Kenya, the CIRT is yet to be felt as a recognized point of convergence."

Kenya is considered more technologically developed in the Eastern Africa region, with more affordable bandwidth compared to other countries, but failure to comprehensively address cybersecurity has exposed gaps in its policies. Kenya has no cybersecurity law, with cybercrime dealt with under the Kenya Communications Act of 2007.