Kenya has in recent years strengthened its policy and regulatory environment, including enforcement of the Kenya Data Protection Act, which places greater responsibility on organisations to safeguard personal data during processing, storage and transfer.
Even so, experts argue that compliance alone is not sufficient without sustained investment in proactive risk management.
Against this backdrop, APA Insurance has unveiled APA Cyber Insurance, a product designed to provide financial protection and technical response support to businesses navigating Kenya’s rapidly expanding digital economy
Speaking during the launch APA Insurance and APA Apollo Group CEO Ashok Shah warned that institutions are continuing to bleed financial resources to cybercriminals due to weak mitigation frameworks and underinvestment in digital safeguards
Chief Operating Officer at APA Insurance Parul Khimasia said most modern enterprises, data and IT systems are core business assets and without secure systems and reliable data, operations can cease entirely.
The insurer said the new cover targets both large corporates and SMEs, featuring a simplified quotation and underwriting process to encourage uptake across different business segments.
The policy provides protection against a broad range of cyber risks, including ransomware and malware attacks, cyber extortion, denial-of-service incidents, insider misuse, third-party liability exposures and breaches arising from vendor access to internal systems.
Beyond financial protection, the solution integrates an incident response framework that grants clients access to IT forensic specialists, crisis communications advisors and legal experts to contain breaches, manage reputational fallout and navigate regulatory exposure.
Shah noted that cyber risk has evolved from a technical concern to a boardroom priority. “Cyber risk is no longer confined to the IT department; it is a strategic and board-level issue. As Kenya’s digital economy expands, companies must strengthen their resilience to emerging threats,” he said.
Industry observers say the launch signals growing recognition within Kenya’s insurance sector that cyber resilience is now a core component of enterprise risk management. As digital adoption accelerates across sectors, insurers are positioning cyber cover not as an optional add-on, but as a strategic shield against operational disruption, regulatory penalties and reputational damage.
For SMEs in particular many of which lack in-house cyber expertise the combination of financial cover and access to specialist response teams could prove critical in safeguarding business continuity in an increasingly connected economy.