Analysis of OT/ICS security, IEC 62443, and Kenya's CII Regulations, written by port254's principal advisor.
Kenya's CII Regulations name transport among the designated sectors, but most guidance written about them is generic. Here's what Regulation 39(d), 31(2), and Form CMCA 6 specifically require of an airport, port, or rail operator, and where the operational-technology gap actually sits.