NAIROBI, Kenya — Parliament has approved establishing the National Cybersecurity Agency (NCSA), paving the way for a new autonomous institution to coordinate cybersecurity efforts and safeguard Kenya’s rapidly expanding digital ecosystem.
The Ministry of Information, Communications, and the Digital Economy welcomed the approval, describing it as a significant milestone in strengthening the country’s digital security architecture.
The agency will be established under the National Cybersecurity Agency Order, 2026, issued by President William Ruto pursuant to the State Corporations Act.
According to the ministry, the NCSA will serve as Kenya’s central technical and regulatory institution on cybersecurity matters, coordinating efforts to protect critical information infrastructure that supports national security, public service delivery, economic activity, and daily digital transactions.
The move comes as Kenya continues to deepen its digital transformation through mobile money, digital financial services, e-government platforms, telecommunications, health information systems, education technology, and online commerce.
While these innovations have accelerated economic growth and expanded access to services, they have also increased exposure to cyber threats targeting both public and private sector systems.
The ministry cited cybercrime, ransomware attacks, online fraud, identity theft, malicious software, data breaches, misinformation campaigns, and attacks on critical digital infrastructure as among the growing risks facing the country. It noted that cybersecurity has become a national priority as government institutions, businesses, and citizens become increasingly dependent on digital technologies.
Under its mandate, the agency will formulate and oversee national cybersecurity strategies, audit and certify the resilience of critical information infrastructure, manage the National Cybersecurity Operations Centre, support sector-based cybersecurity centres, and coordinate responses to cyber incidents.
It will also conduct technical assessments of digital networks, identify emerging vulnerabilities, and issue cybersecurity advisories.
A key component of the agency’s work will be the establishment of a Cybersecurity Centre of Excellence to promote research, innovation, skills development, and locally developed cybersecurity solutions. The centre is expected to help address Kenya’s cybersecurity skills gap through professional certification programmes, specialised training, and technical capacity-building initiatives.
To ensure a whole-of-government approach, the agency’s board will include representatives from the Ministry of Interior, National Treasury, Ministry of ICT and the Digital Economy, the Office of the Attorney-General, Kenya Defence Forces, National Police Service, National Intelligence Service, Office of the Director of Public Prosecutions, academia, and the private sector.
The government said the creation of the NCSA reflects growing recognition that cybersecurity is no longer merely a technical concern but a strategic issue affecting national security, economic stability, and governance. A secure digital environment, the ministry noted, is essential for protecting citizens’ data, ensuring business continuity, attracting investment, and sustaining confidence in digital services.
