Kenya has quietly made an important digital-governance change. From July 1, county payroll processing linked to the Integrated Financial Management Information System ensures that when a county pays salaries, PAYE, pension contributions and other statutory deductions are routed to their intended recipients rather than left for later remittance.
Controller of Budget Margaret Nyakang’o says the reform is meant to stop new arrears after counties reported Sh100.24 billion in outstanding salary arrears and statutory deductions as of June 30, 2026.
The reform matters because it changes the nature of control. Previously, a county could pay an employee’s net salary while delaying money already deducted for taxes, pensions or other obligations. The new architecture attempts to remove that discretion from the payment process itself. Instead of relying only on audits and penalties after the act, government is embedding the rule into the transaction.
The principle is powerful: the strongest control is often not another audit after money has gone missing, but a system that makes the wrong transaction difficult to execute. Employers are required to deduct and remit taxes, pension contributions, health contributions and other statutory obligations. Automating those obligations can narrow the dangerous gap between deduction and remittance.
But automation does not eliminate governance risk. It relocates it. Once HRIS-Ke, IFMIS, tax, pension and banking systems become interconnected, the integrity of identities, payroll records, interfaces and access privileges becomes more consequential. A badly governed automated system can process a bad instruction faster and at far greater scale than a manual one.
Kenya’s reform history supports that caution. Government has pursued a common payroll linked to IFMIS for years, while public-finance reforms increasingly emphasise automated payroll, interoperability and integration with systems such as iTax and Central Bank infrastructure.
International experience shows that integrated financial-management systems can strengthen fiscal control, reporting and accountability, but technology alone does not guarantee those outcomes. Weak design, poor data, excessive privileges and inadequate change management can undermine even expensive systems.
Payroll is particularly sensitive because the problem is not only whether money moves. It is whether the right person, amount and destination exist in the first place. Strong payroll control therefore requires reliable links between personnel records and payroll, restricted authority to alter records, independent verification, permanent audit trails and regular reviews capable of identifying ghost workers and unexplained changes.
Cybersecurity becomes part of public financial management at this point. Every payroll change should be attributable. Who created the employee record? Who altered a bank account, salary, pension scheme or deduction code? Who approved it? Logs should be protected against alteration, privileged access tightly controlled, and exceptional manual overrides made rare, time-bound and independently reviewed.
This is where zero-trust principles become relevant. No employee, administrator, application or connected system should receive unlimited confidence simply because it sits inside a government network. Access should depend on identity, role, device, transaction context and business purpose. A valid password proves who logged in. It does not prove that every change made after login was legitimate.
Integration also increases the importance of segregation of duties. One official should not be able to create an employee, change salary details, alter payment information and approve the resulting transaction. System administrators should not operate without independent oversight merely because their privileges are technically necessary. The more government automates financial controls, the more carefully it must govern the people capable of changing the automation itself.
There is also an important anti-fraud opportunity. Integrated government data can expose duplicate identities, inconsistent employee records, unusual salary changes and suspicious payment patterns that fragmented systems may miss. But the quality of those insights depends on the quality of the underlying data. Automation can stop officials diverting legitimate deductions, but it cannot distinguish a legitimate employee from a ghost worker if identity governance is weak.
The reform should therefore be judged by measurable outcomes rather than by the fact that software has been deployed. Government should publish how much was deducted and remitted, how many transactions failed, how many manual overrides occurred, how quickly exceptions were resolved and whether reconciliations match the records of tax, pension, health and other recipient institutions.
Kenya is right to prevent counties from treating workers’ deductions as an informal source of working capital. But the deeper achievement will come when the architecture makes misuse difficult, anomalies visible and every sensitive change explainable.
Digitisation does not abolish discretion. It moves discretion from the payment desk into system configuration, identity management and access privileges. The success of digital government is not measured by how many processes move online. It is measured by how effectively technology converts public rules into controls that are difficult to bypass, easy to audit and resilient when systems fail.
George Kariuki
ICT, Cybersecurity and Digital Governance Professional
0721912978
[email protected]
