View source for Central & Eastern Cohort: Cybersecurity Resilience Workshop -Track 1: Securing institutional e-mail, websites and identity systems

KENET is pleased to invite you to the Cybersecurity Resilience Workshop - Track 1. This track focuses on fortifying the institutional digital perimeter by mastering the core protocols of DNS, Email, and Identity. Participants will transition from managing local services to building a "Circle of Trust" through the deployment of DNSSEC, DMARC/SPF/DKIM email protections, and eduroam infrastructure. The training will be held from February 23rd to February 27th, 2026, at the Abai Lodges and Spa in Kirinyaga.



The training will be held from February 23rd to February 27th, 2026

=Objective=

By the end of the program, attendees will be able to architect a full-lifecycle Identity Management (IdM) system, configure an Identity Provider (IdP) for global federation, and ensure all services meet international compliance and security standards. The ultimate objective is to provide seamless, secure access to resources while protecting the institution's brand and data integrity from modern cyber threats.

=Who Should Attend?=

This course is designed for Cybersecurity specialists, Systems administrators and webmasters. 

=Prerequisites=

1. Laptop for the sessions with Wi-Fi capability
2. Intermediate to expert knowledge of Linux and the command line operations.

=Course content=
'''Note''': All lab manuals and slides can be found in the [Workshop Resource Folder] at the bottom of this page.



==Trainers==

{| class="wikitable sortable" style="width:75%;"
|+ '''List of Training Team Members'''
! Full Name
! Initials (Inst.)
! Role
! Organization
|-

| Nyanjau Kimani
| NK
| Program Manager
| KENET
|-
| Alfred Kipruto
| AKip
| Quality Assurance
| KENET
|-
| Zeinab Mzungu
| ZM
| Logistics & Support 
| KENET
|-
| Caroline Gachuhi
| CG
| Registration & Support 
| KENET
|-
| Amos Koech
| AKoech
| Trainer
| KENET
|-
| Anne Inapat
| AI
| Trainer
| KENET
|-
| Anthony Kimani
| AK
| Trainer
| KENET
|-
| Kevin Chege
| KC
| Trainer/Labs
| ISOC
|-
| Kelvin Kariuki
| KK
| Trainer 
| MMU
|-
| Samuel Macharia
| SK
| Trainer
| KENET
|}

==Participants==


==TimeTable==
{| class="wikitable" style="width:100%;"
|+ Master Schedule: Track 1: Securing Institutional Emails, Websites and Identity Systems
! Time !! Day 1 (Joint) !! Day 2  !! Day 3  !! Day 4  !! Day 5 
|-
| **07:00** || **Welcome and registrations** || colspan="4" style="background:#eee; text-align:center;" | ''Sessions start at 08:00''
|-
| **08:00** || **Introductions & Objectives (JOINT)** (AKip) || style="background:#f9f9f9;" | '''Recap''' || style="background:#f9f9f9;" | '''Recap''' || style="background:#f9f9f9;" | '''Recap''' || style="background:#f9f9f9;" | '''Recap'''
|-
| **08:20** || **Housekeeping (JOINT)** (ZM/Akip) || **Module 13:** Intro to Identity and Access Management (IAM) in Education (AK) [https://training.kenet.or.ke/images/e/e0/Track_1_Introduction_to_Identity_Management_in_Educational_Institutions.pdf [5]] || **Module 3:** Email Security Basics (KK) || *Module 9:** Installing and Configuring an Identity Provider (AK) || **Module 17:** Future of Identity and Trust in Education(AK) 
|-
| **08:35** || style="background:#f0f0f0;" | (08:35 - 09:00 Joint Session) || style="background:#f0f0f0;" | (Contd) || style="background:#f0f0f0;" | (Contd) || style="background:#f0f0f0;" | (Contd) || style="background:#f0f0f0;" | (Contd)
|-
| **09:00** || **ICANN Grant Funded Training Project - an overview (JOINT)** (AKip/NK/BO)
[https://training.kenet.or.ke/images/6/60/ICANN_KENET_Grant_-_Project_Overview_2026-2.pdf [1]] 
[https://training.kenet.or.ke/images/d/d5/KENET_Program_Overview_ICANN_BO.pdf [1.2]] 
[https://www.surveymonkey.com/results/SM-sWBpp5INtmvcdIcDykpfkg_3D_3D/ [1.13]
|| **Module 14:** Authentication and Authorization Protocols (AK) [https://training.kenet.or.ke/images/4/44/Track_1_Authentication_and_Authorization_Protocols.pdf [6]] || **Module 4:** Securing Email (DKIM, SPF, DMARC) (Akoech/KK) || (Contd) || **Module 12: ** Best Practices for eduroam, and IdP** (AI/AK) 
|-
| style="background:#eef;" | **10:00** || colspan="5" style="background:#eef; text-align:center;" | '''Tea break (10:00 – 10:30)'''
|-
| **10:30** ||  **Lab Environment & Topology Walkthrough (Lab Support)** (KC) [https://training-labs.kenet.or.ke [1.3]]  || **Module 15:** Federated Identity & Trust (AK) [https://training.kenet.or.ke/images/b/b6/Track_1_Federated_Identity_and_Trust.pdf [7]] || (Contd) || (Contd) || Assessment -section 1 MCQs** (ZM) 
|-
| **11:30** || **Module 1 on Intro to IP addressing and Routing (JOINT)** (KK) [https://training.kenet.or.ke/images/7/7d/Track_2-Module_1-Introduction_to_IP_Addressing_and_Routing.pdf [2]] || **Module 14:** LDAP Identity Management Lab (AK) || **Module 6:** Best Practices for Securing Managed Email Services (KK) || (Contd) || Assessment -section 2 - LAB
|-
| **12:30** || **Module 1: DNS and its roles (JOINT)** (Akoech) [https://training.kenet.or.ke/images/b/bd/01_Track_1_A_Module_1_Introduction_to_DNS_%26_its_Role_in_Network_Security-2026.pdf [3]] || (Contd) || (Contd) || (Contd) || (Contd)
|-
| style="background:#efe;" | **13:00** || colspan="1" style="background:#efe; text-align:center;" | '''Lunch break - Break into respective rooms after lunch''' || colspan="4" style="background:#efe; text-align:center;" | '''Lunch break'''
|-
| **14:00** || **Module 2: DNS Security & DNS Security Lab** (AKoech) [https://training.kenet.or.ke/images/b/bd/01_Track_1_A_Module_1_Introduction_to_DNS_%26_its_Role_in_Network_Security-2026.pdf [4]] || **Module 8:** Secure Wi-Fi Authentication (eduroam & RADIUS) (SK/AI) [https://training.kenet.or.ke/images/1/12/Implementing_Secure_Wi-Fi_Authentication_Using_FreeRADIUS.pdf [8]] & **Module 8:** Implementing Secure Wi-Fi Authentication Using FreeRADIUS - Lab (AI/SK) || **Module 5:** Common Web Vulnerabilities& Security Assessment Lab (Akoech/KK)  || **Module 10:** eduroam/freeRADIUS Monitoring & Troubleshooting (SK/AI) & LAB (Configuring and propagating eduroam SSID on AP controller) (SK)
 || **Module 5:** Compliance and DPA 2019 -security&safeguards (NK) [JOINT] **Vote of Thanks (Guest Speaker)
|-
| **16:00** || **Recap** (All) || **Recap** (All) || **Recap** (All) || **Recap** (All) || style="background:#f0f0f0;" | (16:00 - 16:30 **Certificate Award** **Post-Training Survey**)
|-
| style="background:#eef;" | **16:30** || **Tea break and Day End** || **Tea break and Day End** || **Tea break and Day End** || **Tea break and Day End** || **Tea break & End of Training!**
|}

==Training Feedback Survey==

==Workshop Training Resources==
<div style="background-color:#e6ffe6; padding:10px; border-radius:5px; margin-top:10px;">
'''Track 1: Securing Domains, Email, Web & Identity and Federation Services'''
* [https://filesender.kenet.or.ke/download.php?token=db8229bd-fd5d-43bd-8527-b4fbdfff5bf2&files_ids=543 Download Track 1 Resources]
</div>

<div style="background-color:#e6f7ff; padding:10px; border-radius:5px;">
'''JOINT Sessions'''
* [https://training.kenet.or.ke/images/d/d5/KENET_Program_Overview_ICANN_BO.pdf Download Project Overview]
* [https://training.kenet.or.ke/images/b/b8/ICANN_KENET_Grant_-_Project_Overview_2026.pdf Download Project Overview_2]
</div>

<div style="background-color:#e6f7ff; padding:10px; border-radius:5px;">
'''Additional Resources from NSRC -a KENET Training Partner'''
* [https://learn.nsrc.org/cndo/REN_ecosystem Access NSRC REN_ecosystem]
</div>

==Session Photos==