Activist petitions IEBC to prove security of election systems amid spyware, AI threats

A Nakuru activist has challenged the Independent Electoral and Boundaries Commission (IEBC) to publicly prove the security of its election systems, warning that spyware and artificial intelligence (AI) risks could undermine the credibility of future polls.

The petitioner, Laban Omusundi, wants the commission to outline a comprehensive cybersecurity framework within 60 days to safeguard electoral technologies, including the Kiems kits.

In his petition, Omusundi urged the electoral body to acknowledge the risks posed by spyware and AI-driven interference, saying the threat model must cover all electoral assets.

“The framework should include asset inventory, secure development lifecycle, penetration testing, independent code review, supply-chain controls, incident response, logging and post-election audits, mapped to the law’s requirements,” he said.

The activist further asked IEBC to form standing partnerships with independent international experts who would monitor and verify electoral technologies before, during and after elections, with the capacity to detect real-time anomalies.

He also challenged the commission to ensure transparency and verifiability by making public its system architecture and data-flow summaries.

“The commission should enable observer access to logs under strict privacy controls, release hash-locked software builds and commit to open, independently repeatable verification of results,” he said.

The petition further calls on IEBC to issue regular public updates after significant incidents, explaining the security measures undertaken to sustain public trust.

Omusundi pointed to a September 2025 report by independent forensic experts that found commercial spyware, FlexiSPY, on two Kenyan filmmakers’ phones while the devices were in police custody. He warned that similar tools could be used to target stakeholders in an electoral process.

“There is a risk to democratic integrity if General Elections are conducted amid credible fears of digital interference. The same may erode public trust, weaken governance and endanger national stability,” he said.

He reminded IEBC that the Constitution requires an electoral system that is simple, accurate, verifiable, secure, accountable and transparent, with prompt tabulation and open release of results.

The petition further recommends that IEBC adopt independent, internationally verifiable technical oversight, including real-time monitoring and post-event audits.

“The same should not be left solely to insiders but have windows for external experts to inspect and continuously audit code, infrastructure and data flows,” Omusundi said.

The activist also pressed the commission to guarantee that election results remain free, fair, transparent and verifiable.

He recalled that in July 2025, IEBC had cautioned politicians against making unsubstantiated remarks about rigging after a sitting legislator from Wajir claimed that votes for the presidency could be “stolen.”

Other Topics To Read

• Headlines
• National
• IEBC
• cybersecurity
• cyber security
• Independent Electoral and Boundaries Commission
• cyber threats
• Cyber attacks
• Activist petitions IEBC to prove security of election systems amid spyware
• AI threats

“This rhetoric climate increases the risk of distrust and underscores the need for credible, technical safeguards and transparent oversight,” Omusundi said.

The petition was formally received and stamped by IEBC.