NAIROBI, Kenya- Kenya has taken a major step towards strengthening its digital security framework after Parliament approved the National Cybersecurity Agency Order, 2026, paving the way for the establishment of the National Cybersecurity Agency (NCSA).
The new agency will serve as an autonomous regulatory and technical body tasked with coordinating national cybersecurity efforts and protecting the country’s rapidly expanding digital infrastructure.
Established through an order issued by President William Ruto under the State Corporations Act, the agency is expected to become Kenya’s central institution for cybersecurity oversight and response.
The Ministry said the creation of the agency reflects the growing importance of cybersecurity as Kenya continues to expand digital services across government, business, healthcare, education and financial sectors.
“Cybersecurity is no longer solely a technical issue but a strategic national security, economic and governance priority,” the Ministry said in a statement on Monday.
Kenya’s digital transformation has accelerated over the past decade, driven by innovations in mobile money, e-government services, online commerce and telecommunications.
However, the increased reliance on technology has also exposed institutions and citizens to rising cyber threats.
The government noted that cybercrime, ransomware attacks, online fraud, identity theft, malware, data breaches and attacks targeting critical infrastructure continue to pose significant risks to national security and economic stability.
The NCSA will provide a coordinated national framework for preventing, detecting, responding to and recovering from cyber threats.
It will work closely with government agencies, security institutions, regulators, private sector players, academic institutions and international partners.
Among its key responsibilities, the agency will oversee the implementation of national cybersecurity strategies, audit and certify critical information infrastructure, manage the National Cybersecurity Operations Centre and coordinate responses to cyber incidents.
The agency will also establish a Cybersecurity Centre of Excellence to promote research, innovation and skills development while addressing the country’s growing cybersecurity talent gap through specialised training and certification programmes.
To strengthen coordination across government, the agency’s board will include representatives from the Ministry of Interior, National Treasury, Ministry of Information, Communications and the Digital Economy, the Attorney-General’s Office, Kenya Defence Forces, National Police Service, National Intelligence Service and the Office of the Director of Public Prosecutions, alongside members from academia and the private sector.
The government said a secure digital environment is critical for protecting public institutions, safeguarding citizens’ data, supporting business continuity, attracting investment and advancing Kenya’s ambition of becoming a regional technology and innovation hub.
Authorities have called on public institutions, businesses, academic institutions and development partners to collaborate with the new agency in building a secure, resilient and trusted digital ecosystem for all Kenyans.
