Fortifying the Digital Frontier
In an era where cyber threats evolve at lightning speed, Safaricom PLC, Kenya’s leading telecommunications and mobile money provider, is reinforcing its position as a guardian of digital trust.
As the operator behind M-PESA, which handles billions in transactions each year, the company has become a prime target for hackers seeking to exploit financial data.
According to the Communications Authority of Kenya, financial service providers faced over 860 million cyber threats in 2024—averaging two million attacks daily, with 90 percent targeting sectors like banking. “Data is gold,” notes Nicholas Mulila, Safaricom’s Chief Corporate Security Officer, underscoring the critical need for robust digital defense systems.
24/7 Cyber Command Center
At the heart of Safaricom’s defense lies its 24/7 Security Operations Centre (SOC)—a high-tech facility that monitors and neutralizes threats in real time. Independent from the company’s technology division, the SOC enhances visibility, analytics, and response speed against risks such as phishing, ransomware, and data breaches.
This proactive system allows Safaricom to safeguard its network integrity and respond rapidly to evolving vulnerabilities highlighted in global cybersecurity Enterprise
Enterprise Solutions and Compliance
Beyond internal protection, Safaricom extends enterprise-grade cybersecurity services to sectors such as finance, transport, and logistics. These managed security services allow businesses to focus on their operations while relying on Safaricom for continuous threat mitigation. The company also ensures compliance with PCI DSS standards, vital for card and payment data protection.
Building Human Capital for Digital Defense
Recognizing that insider risks account for nearly 60 per cent of all threats, Safaricom invests heavily in training and ethical awareness.
Through initiatives like ‘Accelerate by Safaricom’ and the Industry Digital Talent Platform, the firm trains over 1,400 youths annually in cybersecurity, AI, IoT, and cloud computing.
Quarterly fraud forums bring together 489 suppliers and financial institutions to address emerging challenges such as AI-driven attacks like FraudGPT and money laundering.
Cybersecurity at the Core of Innovation
Safaricom’s cloud infrastructure, hosted in secure Nairobi and Kisumu data centers, integrates cybersecurity into its 5G network expansion, now spanning over 1,000 sites across 47 counties. This setup supports AI-driven fraud detection and real-time analytics for enhanced protection.
CEO Peter Ndegwa identifies cybersecurity as the company’s top enterprise risk, warning of its potential to damage finances and reputation. Through strategic collaborations, such as with iXAfrica to strengthen AI infrastructure. Safaricom continues to protect its ecosystem while empowering Kenya’s digital economy to thrive securely in an increasingly connected world.