Cybersecurity Resilience Workshop -Track 1: Securing institutional e-mail, websites and identity systems
KENET is pleased to invite you to the Cybersecurity Resilience Workshop - Track 1. This track focuses on fortifying the institutional digital perimeter by mastering the core protocols of DNS, Email, and Identity. Participants will transition from managing local services to building a "Circle of Trust" through the deployment of DNSSEC, DMARC/SPF/DKIM email protections, and eduroam infrastructure. The training will be held from January 25th-January 30th, 2026, at the Boma Inn Eldoret.
The training will be held from January 19th-January 23rd, 2026.
Contents
Objective
By the end of the program, attendees will be capable of architecting a full-lifecycle Identity Management (IdM) system, configuring an Identity Provider (IdP) for global federation, and ensuring all services meet international compliance and security standards. The ultimate objective is to provide seamless, secure access to resources while protecting the institution's brand and data integrity from modern cyber threats.
Who Should Attend?
This course is designed for Cybersecurity specialists, Systems administrators and webmasters.
Prerequisites
1.Laptop for the sessions with Wi-Fi capability 2.Intermediate to expert knowledge of Linux and the command line operations.
Course content
Workshop Resources
| Full Name | Initials (Inst.) | Role | Organization |
|---|---|---|---|
| Nyanjau Kimani | NK | Program Manager | KENET |
| Alfred Kipruto | AKi | Quality Assurance | KENET |
| Zeinab Mzungu | ZM | Logistics & Support | KENET |
| Caroline Gachuhi | CG | Registration & Support | KENET |
| Amos Koech | AK | Instructor | KENET |
| Anne Inapat | AI | Instructor | KENET |
| Anne Inapat | AI | Instructor | KENET |
| Anthony Kimani | KA | Instructor | KENET |
| Lilian Maina | LM | Instructor | KENET |
| Kelvin Kariuki | KK | Instructor | MMU |
Participants
| No | Institution | Name | Designation |
TimeTable
| Time | Day 1 (Joint & Room A) | Day 2 (Room A) | Day 3 (Room A) | Day 4 (Room A) | Day 5 (Room A) |
|---|---|---|---|---|---|
| **07:00** | **Welcome and registrations** | Sessions start at 08:00 | |||
| **08:00** | **Introductions & Objectives (JOINT)** (AKip) | Recap | Recap | Recap | Recap |
| **08:20** | **Housekeeping (JOINT)** (ZM/Akip) | **Module 13:** Intro to IAM in Education (AK) | **Module 15:** Federated Identity & Trust (AK) | **Module 6:** Best Practices for Securing Managed Email Services (KK) | **Module 10:** Federation Membership Testing (AK) |
| **08:35** | (08:35 - 09:00 Joint Session) | (Contd) | (Contd) | (Contd) | (Contd) |
| **09:00** | **ICANN Grant Funded Training Project - an overview (JOINT)** (AKip/NK/BO) | **Module 14:** AuthN/AuthZ (MFA/LDAP) (AK) | **Module 17:** Future of Identity (AK) | **Module 5:** Email & DNS Simulation Labs (Akoech/KK) | **Module 11:** Federation Monitoring & Troubleshooting Lab (eduroam & SimpleSAML) (AI/AK) |
| **10:00** | Tea break (10:00 – 10:30) | ||||
| **10:30** | **Module 1 on DNS and its roles (JOINT)** (Akoech) | **Module 14:** LDAP Lab (AK) | **Module 8:** Secure Wi-Fi Authentication (eduroam & RADIUS) (AI) | **Module 5:** Email & DNS Simulation Labs contd. (Akoech/KK) | **Best Practices for Wi-Fi Security, eduROAM, and Federation** (AK/AI) |
| **11:30** | **Module 1 on Intro to IP addressing and Routing (JOINT)** (KK) | **Module 3:** Email Security Basics (AKoech) | **Module 8:** Implementing Secure Wi-Fi Authentication Using FreeRADIUS - Lab (AI) | **Module 9:** IdP-Identity Provider as a Service (AK/AI) & Installing and Configuring a SimpleSAML IdP (AK/AI) | **MCQs Assessments** (ZM) & Recap of labs (All) |
| **12:30** | **Module 1: Intro to IP addressing and Routing contd** (KK) | (Contd) | (Contd) | (Contd) | (Contd) |
| **13:00** | Lunch break - Break into respective rooms after lunch | Lunch break | |||
| **14:00** | **Module 2: DNS Security & DNS Security Lab** (AKoech) | **Module 4:** Securing Email (DKIM, SPF, DMARC) (AKoech/KK) & **Module 5:** Email Authentication & DNS Security Assessment Lab (KK/Akoech) | **Implementing Secure Wi-Fi Authentication Using FreeRADIUS - Lab Contd** (AI) | **Module 9:** Installing and Configuring a SimpleSAML Identity Provider contd (AI/AK) | **Compliance and DPA** (LM); **Certificate Award** (NK); **Vote of Thanks & Closing Ceremony** (Akip) |
| **16:00** | **Recap** (All) | **Recap** (All) | **Recap** (All) | **Recap** (All) | (16:00 - 16:30 Final Wrap) |
| **16:30** | **Tea break and Day End** | **Tea break and Day End** | **Tea break and Day End** | **Tea break and Day End** | **Tea break & End of Training!** |
Feedback Survey
