Jevans Nyabiage
15 November 2009
Nairobi — The Kenyan Government last week made a bold step towards ensuring network security for its agencies, when it scaled-up plans to set up an internet exchange point, where they will all connect. The telecoms industry regulator, the Communications Commission of Kenya last week invited firms to bid for the supply, installation, testing and commissioning of a Government of Kenya internet exchange point.
The government's internet exchange point will act as a centralised clearing house for government entities and will facilitate different government bodies to connect with each other. It will also provide a redundancy (back-up) internet exchange point for the country.
Currently, Kenya has only one internet exchange point. The Kenya Internet Exchange Point (KIXP) as it is known, was established in 2000 and is managed by the Telecommunications Service Providers Association of Kenya (TESPOK).
The GIXP will allow government ministries and agencies to peer (connect directly without going through third parties) ensuring that the contents are not exposed to malicious hackers, data miners and eavesdroppers, among other security threats. The government has numerous concerns about security and privacy for its agencies and GIXP will create a sense of control and security.
Tight control
Government ministries, agencies and ISPs (internet service providers) have been peering at the KIXP, which is operated under a public-private partnership. However, there have been concerns that information from security agencies and the Kenya Revenue Authority has been passing through infrastructure that the government has no tight control over.
But the government has always downplayed the security concerns, arguing that GIXP is motivated by its need to set the pace in ICT infrastructure investment and attract international investors. "Investing in GIXP will demonstrate the government is serious about data protection and integrity; a major concern for investors in business process outsourcing," said Dr Bitange Ndemo, permanent secretary, Ministry of Information and Communication.
The exchange point will also peer at the KIXP, and the Communications Commission of Kenya will be given the task of ensuring smooth operations. There are no details on whether CCK will put in place security features such as deep packet inspection or whether the government will develop its own data encryption.
Many argue that security comes after the infrastructure is in place and human resources are trained. Having a peering point will not shield the agencies from any potential security problems if other aspects are not well taken care of.
Others say that the majority of security problems come from within an organisation, rather than from external sources. Apart from the security guarantee that the government will give to investors and the public, Dr Ndemo says, GIXP will provide redundancy to KIXP and vice versa, ensuring that forms and other communications submitted online to government agencies are well-protected.
Be the first to Write a Comment!
Copyright © 2009 The Nation. All rights reserved. Distributed by AllAfrica Global Media (allAfrica.com). To contact the copyright holder directly for corrections — or for permission to republish or make other authorized use of this material, click here.
AllAfrica aggregates and indexes content from over 125 African news organizations, plus more than 200 other sources, who are responsible for their own reporting and views. Articles and commentaries that identify allAfrica.com as the publisher are produced or commissioned by AllAfrica.
