Who We Are

Port254 is the principal-led advisory practice of Tony Kirui, with more than two decades across networking, infrastructure and cybersecurity, currently operating at Principal Advisor/Consultant level with critical infrastructure and operational-technology environments in Australia. Port254 applies that experience directly to Africa's critical infrastructure: energy, water, transport and financial services operators navigating both the operational-technology risk and the regulatory obligations now attached to it.

Principal Credentials

Contributor, ISA/IEC 62443 standards working groups.

Core Services

• OT/ICS Security Assessment: asset identification, zone/conduit modelling, SL-T assessment
• IEC 62443 Advisory & Gap Programme: standards-anchored remediation roadmap
• CII Regulatory & Audit Readiness: Form CMCA 6 pre-audit assessment, Legal Notice 44 compliance, broader GRC advisory
• OT Network Architecture & Segmentation: IT/OT boundary and zone/conduit design
• Offensive Assurance for OT/IT Boundary: operations-safe and general IT network penetration testing
• AI System Security Assessment: adversarial testing for AI in OT/CI environments

Industries Served

Regulatory Grounding

Deep working knowledge of Kenya's Computer Misuse and Cybercrimes (Critical Information Infrastructure and Cybercrime Management) Regulations, Legal Notice 44 of 2024, and Form CMCA 6, the prescribed NC4 audit template.