ICANN Grant Funded Cybersecurity Capacity Building Program 

Strengthening Kenya's Cybersecurity Posture: Inclusive Capacity Building across Five Regions 

Executive Summary 

KENET was awarded a $500,000 grant by the Internet Corporation of Assigned Names and Numbers (ICANN) to strengthen the cybersecurity posture of member institutions through regional cybersecurity capacity building workshops under the Project Titled: “Strengthening Kenya's Cybersecurity Posture: Inclusive Capacity Building across Five Regions”. This will be a two-year program starting from July 2025 with development of the special training materials to be delivered as hands-on, in-person regional cybersecurity workshops in the first year. In the second year, the materials will be available through instructor-led virtual/online workshops. The regional workshops have been organized in two tracks, namely. 

• Track 1: Securing institutional e-mail, websites and identity systems and 

• Track 2: Securing campus networks and IT assets.  

Participants gain practical skills to improve trust, resilience, and operational security within their institutions. 

This program is designed for ICT professionals responsible for their institutional network, and systems. 

Project Overview 

The ICANN Grant Funded KENET Cybersecurity Capacity Building Program is a two-year hands-on training designed to address pressing cybersecurity gaps within research and education institutions. Many institutions face challenges such as misconfigured domains, incomplete DNS records, and weak email security, which leave them vulnerable to spoofing, phishing, and other cyberattacks. For example, domains often misconfigure essential Resource Records (RRs), or fail to implement DKIM, DMARC, and SPF protocols, which are critical components that ensure both domain and email integrity. This program empowers ICT professionals to identify and remediate these gaps, strengthening their institution’s overall security posture. 

The program targets ICT professionals responsible for domains, email systems, identity services, systems security and network operations, providing practical, hands-on skills to secure key digital infrastructure. Participants learn how to audit their domains, detect vulnerabilities in DNS and email configurations, and implement security controls that prevent abuse and enhance trust in their services as well as best practices for building secure institutional networks. 

To achieve this, the program is divided into two specialized tracks: 

Focuses on domain and email security, federated identity, and trust services. Participants gain hands-on experience in: 

By completing the program, participants will not only strengthen their institution’s domain and email security, but also improve operational resilience, secure network infrastructure, and ensure trustworthy access for their users. The program equips institutions with the knowledge and tools to proactively identify security gaps, remediate vulnerabilities, and maintain a robust cybersecurity posture in a rapidly evolving digital environment. 

The program also emphasizes risk awareness, compliance considerations, and operational practices that enhance the overall cybersecurity maturity of institutions. 

Cybersecurity Domains and Program Alignment 

Cybersecurity covers multiple core domains, below are 10 widely recognized areas. This categorization is commonly used in industry guides, frameworks, and training content to help structure cybersecurity strategy. 

Program Objectives 

By the end of the training, participants will be able to: 

Training Structure and Tracks 

The program consists of two concurrent specialized tracks; each delivered with practical exercises. 

Track 1 – Securing Institutional e-mail, domains, websites and Identity and Trust services 

Focuses on: 

Track 2 – Securing Campus Networks and IT Assets 

Focuses on: 

Target Audience 

Nomination & Registration 

Institutions and satellite campuses may nominate ICT staff to attend. 

Nomination Process: 

 [Nomination Form Link] 

Note: Nomination is open until all slots are filled or by the stated deadline (at least 1 month ahead of each regional training) 

Regional Schedule 

The program will be delivered across multiple regions. Below is the schedule for the upcoming Eldoret Cohort: 

Overall regional schedule is as in the table below (kindly note any changes to the logistics shall be communicated well in advance)  

Which Track is Right for You? 

Approach and Expected Outcomes 

The training emphasizes hands-on learning combined with real-world scenarios. By the end, participants will: