Can Your Security Firm Afford to Secure You?
Can I dare tell you that the greatest threat to private security firms is not external, but financial?
This is a question that most in the industry are uncomfortable sitting with. We are trained to look outward, at the guard at the gate, the surveillance feed, or the rapid response unit on standby. These are the things clients point to during site visits. They are measurable, visible, and reassuring. But they are only part of the big story.
Kenya’s private security sector is a significant industry, employing an estimated 800,000 people across more than 2,000 registered firms, generating over K Sh 300 billion (B) annually. It is one of the country’s largest employers and, for many businesses and households, the most immediate line of defense against a threat environment that keeps expanding. Yet the financial foundations on which this sector operates are more fragile than the industry typically acknowledges. The nature of threats has shifted, and the cost of keeping pace with that shift has not been fully reckoned with.
For decades, private security was defined largely by what could be seen and counted: headcount, patrol frequency, & response times. Clients understood what they were buying, and firms understood what they were selling. That clarity is gone. Security breaches today do not always arrive through a broken fence or a compromised guard. They come through systems vulnerabilities, lapses in access controls, and gaps in digital infrastructure that are harder to detect, slower to resolve, and far more expensive to defend against.
According to data from the Africa Cyber-security Report 2025, Kenya lost K Sh29.9 B to cyber-related incidents in 2025 alone. Across the continent, cyber-security investments runs at roughly 0.55 percent of GDP, and even this modest figure has not been enough to contain losses estimated at about K sh 647.5 billion (B) (USD 5 B). Part of the reason is structural: fewer than one in three cyber-security professionals on the continent holds a recognized certification, meaning that even firms willing to invest in protection often cannot find the talent to deploy effectively. The invisible threat is real, it is growing, and it is expensive to address properly.
This is where finances move from the background to the center of the conversation.
Defending against these newer, less visible threats requires sustained, planned investment, not just in technology, but in the training, systems maintenance, and internal controls that determine whether a firm’s security posture remains credible over time. That kind of investment does not happen without deliberate financial planning. And in an operating environment as demanding as East Africa, financial planning is not a given strategy.
The pressures are many, unpredictable and immediate. Security firms operate fleets that run on fuel, a commodity whose price, in Kenya, swings with global events entirely beyond any firm’s control. As of mid-April 2026, super petrol in Nairobi stood at K Sh 197.60 per liter, a level that reflects both global energy market volatility and the limits of what domestic policy can absorb. For firms locked into fixed-price service contracts, those movements cannot simply be passed on to clients. The margin compression is absorbed internally, and something, somewhere has to give.
Currency risk compounds this further. Firms operating across multiple East African markets earn in different currencies but source equipment and technology in others. A weakened shilling does not only affect imports directly, it raises the effective cost of every upgrade cycle, system refresh and investment in the next generation of security capability. The firms that survive these pressures are not necessarily the ones with the best guards or the latest technology. They are the ones with the financial architecture to absorb shocks without compromising service delivery.
The stakes extend well beyond the firms themselves. When financial pressure forces a firm to delay a system upgrade, stretch its maintenance schedule, or cut corners on training, the vulnerability created is not visible on any dashboard, but it is real.
Clients in high-stakes sectors such as banking, aviation, healthcare and critical infrastructure are beginning to understand this. The question they are starting to ask is not simply whether a security firm can put enough personnel on site, but if it has the financial governance muscles to sustain its operations, invest ahead of emerging risks, and hold its service standard when the operating environment deteriorates. Financial strength, in this context, is not a proxy for trustworthiness; it is a direct measure of operational reliability.
For security firms, the implication is uncomfortable but necessary to confront: finances can no longer be treated as a support function that follows operational decisions. It must inform them. The need for dynamic pricing models that reflect real cost structures, currency risk strategies for firms with cross-border exposure, and cash flow frameworks that maintain liquidity through even in uneven revenue cycles. These are the baseline requirements for any firm serious about sustaining quality in this environment.
The private security industry in East Africa is large, growing, and increasingly essential. But size is not the same as resilience. The firms that will define this sector a decade from now are those building the financial discipline today to invest ahead of risk, rather than to react after failure. Because if finances fails, security has already been compromised, long before the first alarm sounds.
By Everlyn Nandieki
Everlyn Nandieki is SGA Security Head of Group Treasury & Risk Management
