Human Rights Defenders (HRDs) and Social Justice Organisations (SJOs) in Kenya operate at the frontlines of accountability and civic advocacy while also facing a rapidly escalating and sophisticated array of digital threats. Attacks have evolved from opportunistic social engineering to precisely targeted spyware campaigns, including tools such as Pegasus and Cellebrite[1], designed to monitor, silence, and endanger defenders.
In response to these, and informed by a Cybersecurity Needs Survey in March 2026, Tatua Digital Resilience Centre and KICTANet developed this guidebook to close the critical governance and technical gaps that leave HRDs legally exposed and operationally unprepared
This guidebook, therefore, serves as a direct, practical intervention to address systemic failures and threats for human rights defenders and their institutions in Kenya and across the region such as reliance on informal communication channels, lack of access to legal counsel and Incident Management Policies and the lack of technical forensic capacities. By standardising evidence collection, introducing low-cost offline tools, and answering the urgent call for targeted digital forensics training (requested by 59.6% of respondents), this resource aims to bridge the resource gap.
True digital resilience requires moving beyond individual vigilance toward robust institutional governance and intersectional, disability-inclusive safety frameworks. Securely equipping Kenya's human rights ecosystem ensures that those who defend the rights of others are fiercely protected themselves.
This guidebook is published as a set of standalone pages. Open one, read it, then return here to open the next.
Front Matter
Contextual Background and Methodology
How this guidebook was developed and the context that shaped it.
→Purpose and Scope
What this guidebook covers, and who it's written for.
→Glossary and Acronyms
Key terms and abbreviations used throughout the guidebook.
→The Five Parts
Part I — Introduction and Foundational Concepts
Threat landscape, holistic security, threat modeling, and digital hygiene.
→Part II — Institutionalizing Incident Management
Governance, Kenyan legal frameworks, playbooks, and the NIST incident lifecycle.
→Part III — Technical Forensics & Investigative Tools
Legal literacy, triage, metadata analysis, and mobile device forensics.
→Part IV — Operational Standards and Legal Admissibility
Evidence collection, chain of custody, and ethical guidelines.
→Part V — Inclusivity, Policy, and Growth
Disability inclusion, organisational policy, and collaborative frameworks.
→The Tatua Digital Resilience Centre, established by KICTANet, empowers Social Justice Organizations in East Africa to strengthen digital resilience, recover from threats, and harness technology for human rights work. Serving Kenya, Tanzania, and Uganda, it offers strategic support, fosters partnerships, and plans to expand across Africa with sustainable funding models.
Nine Planets, Earth Wing, Suite E9, Kabarnet Garden Road, Nairobi, KENYA | Phone: +(254) 751-000-001 | Email: info@tatua.digital
© 2026 TATUA DIGITAL RESILIENCE CENTRE