Process of Reporting Cybercrimes & List of Required Items

An illustration of someone engaging in cybercrime
An illustration of someone engaging in cybercrime
Photo

The Computer Misuse and Cybercrime (Critical Information Infrastructure and Cybercrime Management Regulations), 2024 came into force on February 9 this year to provide a framework that promotes cybersecurity.

According to the regulations, an individual can file a report on cyber crimes either through electronic or physical means to the National Computer and the National Cybercrimes Co-ordination Committee.

The Regulation Act also provides that the National Police Service should establish a cybercrime reporting desk in every police post and police station in twelve months.

Reporting can be done both electronically and physically in these stations once they are established.

Police Officer at Cybercafé
A police officer holding his gun at a Cybercafé.
Kenyans.co.ke

For one to file a report, they need to fill a FORM CMCA 7 that will be made available at the point of reporting

The following personal identifiers are required to report cybercrime: A valid email address, official websites under attack, and a phone number.

One must also indicate the county of residence,  type of threat, attack, intrusion, risk or other disruption they have experienced.

Additionally, the report should also note the date and time of the incident and screenshots of the suspicious activity and malicious social media accounts; or any other evidence of the crime.

While announcing the regulations coming into force, the Ministry of Interior stated that they were necessary to safeguard institutions within various sectors.

“These regulations enhance the capacity of both public and private sector institutions, such as the telecommunications, banking, transport, and energy sectors, to safeguard critical digital information from cyberattacks and improve cybersecurity readiness, stated the Ministry of Interior.

The Cybercrime regulations also provide that there will be the creation of a Critical Information Infrastructure Cybersecurity Operations Centre which shall be responsible for monitoring, detecting, preventing, responding and investigating cyber threats, within a specific sector as listed within the Act.

According to the Act, the Cybersecurity Operations Sector shall also provide real-time information on cyber threats and incidents to the National Cybersecurity Operations Centre to avert cybercrimes.
 

Interior PS Raymond Omollo speaks to the press during the inspection of Moi Stadium in Embu County on February 21, 2023.
Interior PS Raymond Omollo speaks to the press during the inspection of Moi Stadium in Embu County on February 21, 2023.
Ministry of Interior
  • .