Cybersecurity Is a Board Matter: Do's and Don'ts for Directors

October is Cybersecurity Awareness Month, and the Vellum team is marking it with a series of short, practical briefs for corporate leaders. This week, we turn to the boardroom to focus on the do’s and don’ts every director should know cyber risk.

Cybersecurity is the practice of protecting systems, networks, programs, and data from digital attacks, unauthorized access, or damage. Cyber incidents are no longer simply an IT problem. A ransomware attack, data breach, or fraudulent transfer authorised by a spoofed email can halt operations, trigger regulatory action, and damage a reputation built over decades. Under the Data Protection Act, 2019; the Computer Misuse and Cybercrimes Act, 2018; and directors’ duties of care under the Companies Act, 2015, responsibility for overseeing cyber risk rests squarely with the board.

Capital Unlocked: Decoding Kenya’s Mega-Deal Surge and the New Frontier of East African Finance

For most of the past three years, sub-Saharan African capital markets were characterised by risk aversion, macroeconomic volatility, and an extended freeze on primary market...

From Crude Oil to Fuel: How the Dangote and Changamwe Refineries Differ

A key distinction exists between simply refining crude oil and maximising what you can extract from every barrel. Kenya's former refinery at Changamwe in Mombasa was largel...

Kenya’s Virtual Asset Regime Enters Compliance Phase as VASPs Face November Deadline

Kenya’s FinTech sector has grown rapidly, positioning the country as one of Africa’s leading markets for digital financial services, mobile payments and emerging financi...

Beyond the Pump: When the Dangote Refinery Gets Up and Running

When the proposed US$16 billion Dangote East African Refinery broke ground in Lamu on September 30, 2026, the headline figure was its capacity: 700,000 barrels of crude oil ...