Microsoft Boosts Kenya’s Cybersecurity with Ambitious ARC Initiative Launch

Microsoft Boosts Kenya’s Cybersecurity with Ambitious ARC Initiative Launch

Summary

• Microsoft has launched a new program, the Advancing Regional Cybersecurity (ARC) Initiative, starting with Kenya.
• The initiative partners with Kenya’s National Computer and Cybercrime Coordination Committee (NC4) to strengthen incident response and recovery.
• ARC is aimed at the rising cyber threats that come with Kenya’s fast digital growth.
• Microsoft hopes the Kenya program becomes a model for other countries in the Global South.

Microsoft and Kenya team up

Kenya is one of Africa’s fastest-growing digital hubs, and its exposure to cyberattacks is growing with it. Microsoft announced its Advancing Regional Cybersecurity (ARC) Initiative at the Global Conference on Cyber Capacity Building (GC3B) in Geneva, describing it in a May 14, 2025 blog post, with Kenya as the first partner. The program is part of Microsoft’s broader push to support cyber capacity building across Africa.

What ARC will do

The initiative works through a partnership with Kenya’s National Computer and Cybercrime Coordination Committee (NC4). It has three parts. First, a roundtable with key stakeholders to identify Kenya’s cybersecurity priorities. Second, a tabletop exercise that simulates a realistic cyber incident and stress-tests how agencies coordinate. Third, a practical toolkit built from those sessions to guide future planning and capacity building.

Why Kenya needs it

As Kenya’s digital economy expands, so does the room for cybercriminals. The Communications Authority of Kenya has reported a substantial increase in cyber incidents, and Microsoft points to recent African breaches, including a ransomware attack on a state-owned telecom company in December 2024, as evidence that readiness needs to improve.

Building on earlier work

ARC follows earlier Microsoft efforts in the region, including cybersecurity skills programs and bringing NC4 into the Microsoft Government Security Program, which gives governments access to threat and vulnerability information.

A model for other countries

The program is built on partnership. Microsoft says the toolkit developed with NC4 will carry lessons that can be applied across Africa and beyond, and it hopes to repeat the ARC model in other regions of the Global South. It ties the effort to the Accra Call, the commitments signed at the first GC3B in Ghana in 2023.

What success would look like

Microsoft’s ARC launch in Kenya is a practical program, not a grand one: a roundtable, an exercise and a toolkit. If it works, Kenya gets better-coordinated incident response, and Microsoft gets a template it can take to other countries. The harder part will be keeping the effort going after the first exercises end.

Kenya’s NC4 has already earned a reputation as a regional model, and ARC could help strengthen it further.

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.