Ask AwraIQ about features, pricing, onboarding, login, integrations, security, demos, mobile apps, automation, reports, or support.
Blog Category
Audit readiness, access control, and data protection.
12 articles in security.
Four of the Act's seven operational duties are wholly yours, three are shared, and none can be discharged by a purchase. The controller and processor boundary, what belongs in a processing agreement, and the breach-notification gap stated plainly.
You do not need to be a data business to be a data controller — an employer with payroll already is. Where personal data actually hides, what retention means in software, and the honest limit of any product. Not legal advice.
Most access problems are ordinary people holding permissions nobody meant to give them. Designing roles around jobs, why approval must be a separate permission from action, and the quarterly review that keeps it honest.
An audit trail only earns its keep when somebody reads it. What a usable entry records, why exports matter as much as edits, the edit-after-approval query worth running monthly, and what a trail cannot do.
Two things account for most account risk in a small business: passwords one breach away from public, and accounts belonging to people who left. Why an employee record and a user account are not the same object.
Kenyan businesses make everyone an administrator in the first two weeks because it stops the complaints — and deletes the meaning of every other control. Getting back to least privilege without blocking work.
An auditor picks one line and asks you to rebuild it. The documents, the approvals and the change history together — plus the retention trap that makes evidence expire before the obligation does.
Ghost suppliers, inflated prices, adjustments that cover a count, ghost employees, and the till. Each needs two capabilities in one pair of hands — and each has an aggregate view that exposes it in ten minutes.
One login per location is the most common security arrangement in Kenyan SMEs, and it turns your system from a record of what people did into a record of what a place did. Fixing identity first.
Every term you want at the end of a vendor relationship is available before signature and none of it afterwards. No-cost export, post-termination destruction, the grace period on deletion — and where the disposal boundary actually falls.
The oldest control in the book and the one small teams quietly abandon — the four functions it splits, the dangerous combinations, and how to keep it without more headcount.
Security, governance, audit readiness, role access, mobile evidence, and compliance practices for operational teams.
No articles match your search yet — try another keyword.
More topics
Browse by market instead
Each hub opens with the currency, tax and filing context for that region.
Help Center
Run inventory, procurement, assets, sales, and field work with approved AWRA guidance for setup, migration, integrations, security, pricing, and support.