The terms governing use of this website.
Last updated: September 2026
port254.co.ke is operated by Tony Kirui, trading as port254, providing information about OT/ICS and critical-infrastructure cybersecurity advisory services.
Content on this site, including summaries of Kenya's CII Regulations, IEC 62443, and Form CMCA 6, is provided for general informational purposes and reflects our understanding of the relevant regulation and standards at the time of writing. It does not constitute legal advice, and it should not be relied on as a substitute for a formal compliance assessment, legal counsel, or the primary legal text of the Regulations themselves.
Nothing on this site guarantees a specific compliance, audit, or security outcome. Every engagement depends on the specific systems, environment, and obligations of the organisation involved.
The content, structure, and design of this site are owned by port254 unless otherwise stated. You may reference or link to this content with attribution; you may not reproduce it wholesale for commercial purposes without permission.
Where this site links to external resources (regulatory bodies, standards organisations, certification registries), we aren't responsible for the content or availability of those third-party sites.
Questions about these terms can be sent to tony@port254.com.