As businesses mordernise, cyber resilience must not be forgotten

When I share this scenario with business leaders, their reaction is often the same.

They pause, lean back and say something along the lines of, “It is how quickly things can fall apart. We are so focused on growth that we forget how vulnerable everyday moments can be.”

This concern cuts across sectors. I see it when speaking with hospitals protecting patient records, Saccos safeguarding member data, logistics firms running tight delivery schedules, and retailers who simply cannot afford system downtime.

Every industry has different pressures but a similar underlying reality is that organisations are modernising rapidly, yet their security practices are not always keeping pace.

Kenya’s digital landscape is expanding at remarkable speed, driven by cloud adoption, mobile-first services, data-driven decision-making and the growing use of connected devices. While this transformation is powering efficiency and innovation, it has also widened the attack surface for cybercriminals.

Increasingly, cyber threats are targeting critical systems in finance, healthcare, energy, education and government.

Over the past year alone, we have seen just how disruptive and costly these attacks can be, particularly when they hit critical information infrastructure. This reality has shifted the conversation.

Cybersecurity is no longer a technical issue reserved for IT teams but a critical component for business continuity, an issue that sits firmly at boardroom level.

That perspective shaped discussions at the 2025 Cybersecurity Summit, where sector leaders agreed on one key point, that resilience must be embedded into every organisation’s digital strategy.

Growth without security is fragile and in today’s environment, resilience is not optional.

The urgency becomes even clearer during peak periods. As we head into the festive season, cyberattacks are expected to rise, especially in financial institutions, as criminals exploit increased online activity and moments of reduced vigilance.

Global research consistently shows that cyber incidents spike during public holidays and weekends, often by as much as 30 per cent.

Yet technology alone cannot solve this challenge. Many organisations remain unaware of the extent of their vulnerabilities, whether from outdated systems, weak access controls, unsecured devices or simple configuration errors.

Others invest heavily in digital tools but overlook the human element, even though many breaches still begin with a single click on a convincing phishing email.

True cyber resilience requires a balanced approach, clear visibility of risks, practical protection measures, informed employees and the ability to detect and respond quickly when something goes wrong. Organisations that get this right are better positioned to maintain trust, protect revenue and keep operations running even in the face of disruption.

By combining risk assessments, protection tools, employee awareness and real-time monitoring, the focus is on helping organisations build security into their operations rather than treating it as an afterthought. Partnerships with global technology providers, alongside strong local expertise, further ensure that solutions are relevant to Kenya’s operating environment.

Kenya’s digital progress is undeniable.

But for that progress to be sustainable, it must be anchored on resilience. Organisations that invest in visibility, stronger defences, informed people and faster response capabilities will not only reduce risks, but will also be the ones best positioned to grow with confidence in an increasingly connected world.

The writer is Senior Executive at Safaricom Plc