The general information security guide is meant to improve Kenya’s cyber security posture especially among Small and Medium Enterprises (SMEs), government, private sector players and the general public. These guides complement already existing policies, standards and nothing in this document should be taken to contradict standards and guide that are mandatory and binding on the users or providers of ICT services guide provides good information security practices. It does not prescribe any specific practices or standards that must be implemented. It acknowledges the culture and uniqueness of the Kenyan cyber space in relation to information security.