ICT Authority
ICTA Assessment Digital Readiness & E-Services
Menu

Digital Readiness Assessment

A data-driven diagnosis of Kenya's public sector digital maturity, infrastructure, and service delivery capabilities.

Records Maturity (RMI)

Records maturity is the lowest pillar across MDAs. Digitisation remains minimal for most institutions, constraining automation, integration and auditability — and directly lowering end-to-end service completion.

1.5
Average RMI Score
Low maturity: paper-heavy workflows and limited control environments.
90%
0–10% Digitised
Most MDAs report minimal digitisation of records.
70%
No ERMS
Electronic Records Management Systems not in place for most institutions.
Why records maturity matters
  • Enables end-to-end processing (no “print and bring” steps).
  • Improves auditability and reduces turnaround time.
  • Unlocks interoperability by making data discoverable and trusted.
Link to service performance

Low digitisation and missing ERMS create manual verification and handoffs that reduce completion rates. See the Services page for completion patterns by category.

How to read the RMI results
Digitisation
Extent of records converted into trusted digital form.
Controls
Classification, metadata, retention & disposition.
Systems
ERMS/EDRMS coverage and integration into processes.

Digitisation Degree

Distribution of MDAs by approximate digitisation degree (bands).

Backlog risk Automation constraint
Interpretation
  • The majority of MDAs remain at pilot/minimal digitisation (0–10%), creating backlogs and limiting workflow automation.
  • A smaller subset show meaningful progress (11–40%), often driven by programmatic digitisation of specific record series.
  • Only a very small minority exceed 40% digitisation.
Band drill-down table
Band % MDAs Typical state
0–10% digitised 90% Paper registries; ad-hoc scanning; manual verification dominates
11–40% digitised 7% Targeted series digitised; partial workflows; uneven metadata
>40% digitised 3% Structured digitisation programs; clearer controls; better retrieval
Fast win: digitise what blocks services

Prioritise record series that create the most manual checks in high-volume services (e.g., identity verification, eligibility proofs, licensing evidence). This increases service completion even before full archival digitisation is achieved.

ERMS / EDRMS Adoption

Presence of electronic records management capabilities across MDAs.

Governance control Traceability
Coverage snapshot
~70% report no ERMS, ~25% partial/manual hybrid solutions, ~5% enterprise-grade ERMS.
Common gaps
  • Fragmented file registries
  • Inconsistent metadata and classification
  • Limited retention schedules and disposition controls
  • Low integration with service platforms
Priority interventions
  • EDRMS rollout starting with high-volume / high-risk record series
  • Common standards for metadata, retention, digitisation QA
  • Integrate EDRMS with service platforms to enable end-to-end processing
  • Introduce audit trails for access, edits, approvals and disposition
Minimum viable ERMS (MV-ERMS) checklist
  • Standard folder structure + classification taxonomy
  • Mandatory metadata: owner, date, category, sensitivity, retention
  • Role-based access and logs (who accessed what, when)
  • Retention schedules and disposition approvals
  • API or export capability for service workflow integration

Policy Baseline

Policy adoption provides a foundation but requires stronger implementation, enforcement, and operational controls.

63%
Records Policy
47%
Data Protection Policy
30%
BCP/DR Policy
50%
Acceptable Use Policy
What “policy adoption” does not guarantee
Implementation

Policies must translate into operational procedures (classification, retention, access requests, breach response).

Enforcement

Compliance monitoring, audits, and sanctions are required to reduce exceptions and “shadow filing”.

Recommended Actions

A practical path to raise records maturity and unlock end-to-end digital services without waiting for “perfect digitisation”.

1) Prioritise record series

Digitise the record series that block the highest-volume services and approvals first.

  • Eligibility & verification evidence
  • Licensing & compliance records
  • Payment and receipt trails
2) Deploy MV-ERMS

Start with minimum viable ERMS: metadata, access control, audit logs, and retention.

  • Classification + metadata standards
  • Role-based access
  • Retention schedules
3) Integrate into workflows

Make records part of the service journey: capture evidence digitally and reuse it via APIs.

  • Evidence capture in service portals
  • Automated validation checks
  • Audit-ready approvals
Implementation plan (starter 90-day cadence)
Weeks 1–4
  • Select top record series (by service volume and risk)
  • Define metadata & classification baseline
  • Agree retention schedules & access roles
Weeks 5–8
  • Digitise and QA the selected series
  • Deploy MV-ERMS controls and audit logs
  • Train records and service teams
Weeks 9–12
  • Integrate evidence retrieval into services
  • Measure drop-offs and turnaround time
  • Expand to next record series

Note: Percentages reflect reported ranges and desktop/field assessment synthesis; use as directional indicators for prioritisation.