The Office of the Auditor General (OAG) has received international recognition for its commitment to data security and public accountability after attaining the prestigious ISO/IEC 27001:2022 certification. The Kenya Bureau of Standards (KEBS) has hailed this achievement as a groundbreaking moment for Kenya’s public sector.
During the official award ceremony, KEBS Managing Director Esther Ngari commended the OAG for setting a high bar in digital governance and information security. “This certification is far more than a technical milestone it affirms the Office of the Auditor-General’s commitment to excellence, transparency, and accountability in public service,” said Ngari.
ISO/IEC 27001:2022 is the globally recognized standard for Information Security Management Systems (ISMS), designed to guide organizations in managing the security of sensitive data. For the OAG, which handles critical financial and audit records, this certification strengthens its capacity to maintain data integrity, confidentiality, and availability.
Ngari highlighted that the certification aligns with key pillars in the OAG’s Strategic Plan, particularly those aimed at enhancing credibility, efficiency, and stakeholder trust. “By embedding world-class security controls, the Auditor-General is fortifying its digital infrastructure and strengthening the foundation of national accountability,” she added.
She also stressed that the journey does not end with certification, noting that maintaining the standard requires ongoing vigilance, regular audits, and a culture of continuous improvement. “As your trusted certification partner, KEBS remains committed to providing ongoing support through annual audits and technical guidance,” Ngari said.
Encouraging further progress, she urged the OAG to consider adopting ISO/IEC 22301, a standard focused on business continuity, and invited them to the upcoming 5th Annual ISMS Conference in June 2025.
“This achievement elevates not only your institution but the entire country,” she concluded. “It shows that Kenya’s public institutions are future-focused, resilient, and aligned with global best practices.”
The certification marks a significant step in positioning Kenya as a leader in secure public service delivery, reflecting a broader national commitment to digital transformation and international standards.
