Integrating cybersecurity into supply chain risk management in elector

Kenya, like many African nations, is a nascent democracy striving to achieve credible and transparent electoral processes. The adoption of advanced technologies, such as the Kenya Integrated Election Management System (KIEMS), by the Independent Electoral and Boundaries Commission (IEBC) aims to enhance the efficiency of the electoral supply chain. However, this technological integration has inadvertently exposed the electoral process to significant cybersecurity threats, thereby compromising the integrity of critical supply chain components. This study employs a phenomenological qualitative case study design to investigate the cybersecurity vulnerabilities within Kenya's electoral supply chain, focusing on procurement logistics, ballot paper production, and reverse logistics during the post-election phase. Through in-depth interviews with purposively selected IEBC employees, the study identifies key cyber threats, including vendor manipulation, database hacking, social media disinformation, and foreign technological interference. These threats have led to legal disputes and contested election outcomes, as evidenced in Kenya's 2013, 2017, and 2022 elections. The findings underscore the urgent need for nascent democracies to integrate robust cybersecurity measures into their supply chain risk management strategies to safeguard electoral integrity and enhance resilience against cyber-attacks. By addressing these vulnerabilities, young democracies can mitigate the risks of election contestations and ensure the legitimacy of their democratic processes.