The Technical University of Mombasa (TUM) has successfully concluded a comprehensive three-day audit of its Information Security Management Systems (ISMS).
The audit was conducted by an assessment team from the Kenya Bureau of Standards (KEBS) on November 11 to 13, 2025.
It aimed at evaluating the university's sustained conformity to the ISMS certification standard. The audit also focused on verifying the implementation of all recommendations stipulated during the previous audit cycle.
Presenting their findings, the KEBS team, led by Lead Auditor Ms Elizabeth Kisilu and Mr. Arthur Njuguna, commended TUM for its significant progress and strong adherence to the ISMS standard. The auditors highlighted a high level of excellence across all audited domains, from strategic planning and implementation to performance evaluation.
The audit team specifically noted the university's well-defined application of ISMS policies for effective risk control. Furthermore, they praised the high competency of TUM staff, who demonstrated a robust understanding of the ISMS standard throughout all university functions.
While the audit confirmed a high degree of compliance, a few areas of improvement were identified to support the university's commitment to continuous improvement and world-class standards.
KEBS has stipulated a two-week timeframe for the institution to develop and submit a formal corrective action plan. The KEBS team will subsequently evaluate the plan's effectiveness before issuing its final certification report.
The Vice-Chancellor Prof Laila Abubakar welcomed the positive outcome, commending all staff members for their diligence and commitment to maintaining robust information security protocols. Special recognition was extended to the Directorate of Quality Assurance for its leadership in coordinating the extensive preparation and execution of the audit process.
The VC also expressed appreciation for the KEBS team's thoroughness in covering the audit's wide scope within the three-day period and urged all university members to review the identified minor aspects and take immediate corrective action.
