Cybersecurity and records management practices as precursors to good governance in the digital age in public sector

Purpose This study examines how the advisory role of the Information and Communications Technology Authority (ICTA) influences cybersecurity and records management practices, and how these contribute to enhanced governance in Kenya's public sector. Design/methodology/approach A qualitative case study design was adopted to explore the integration of cybersecurity and records management practices within Kenya's public-sector digital governance framework. Data were collected through semi-structured interviews administered to 18 purposively selected participants, including top management, records management, ICT and information security personnel at ICTA. The data were analysed thematically to identify institutional practices, governance challenges and the extent to which cybersecurity principles are embedded in records management practices. Findings The findings reveal that integrated cybersecurity and records management practices play a critical role in strengthening good governance in Kenya's public sector. ICTA supports this integration through policies promoting role-based access control, secure audit trails, digital signatures and disaster recovery mechanisms. However, challenges persist, including inconsistent implementation across public institutions, unclear records security classification protocols, limited resources and infrequent policy updates. Practical implications The study highlights the need for harmonized implementation of cybersecurity and records management policies across public institutions. Strengthening institutional capacity, clarifying classification frameworks and regularly updating policies would enhance information management and improve governance outcomes. Originality/value This study provides original insights into cybersecurity and records management as interdependent components of digital governance within the public sector. Situated in Kenya's digital landscape, it offers evidence from a Global South perspective, contributing to debates on secure digital governance, institutional accountability and records management in emerging economies.