Case Study: Safaricom strengthens information risk management with Citicus ONE

Safaricom - Customer Case Study

Safaricom Limited, a leading telecommunications service provider in Kenya, wanted to strengthen its risk management and protect company and subscriber data while reducing reliance on manual processes and stretched security staff. To support this, Safaricom evaluated automated tools and selected Citicus ONE from Citicus to help build a more accurate, repeatable information risk management process within its ISMS.

Citicus supported Safaricom with a pilot for its most critical systems in 2007-2008, followed by a full rollout in 2008-2009, alongside ongoing support and training. The implementation helped Safaricom establish a Corporate Information Security Office and an ISO27002-aligned ISMS, improve risk awareness across the organization, and extend risk management into incident reporting and monitoring, with plans to use Citicus ONE in additional risk areas.

Safaricom

Anthony Gacanja

Manager of Safaricom's Corporate Information Security Office