Parliament has approved the establishment of the National Cybersecurity Agency (NCSA) to regulate, coordinate cybersecurity efforts and protect Kenya’s digital infrastructure.
The Ministry of Interior and National Administration welcomed the move, saying the agency will serve as an autonomous regulatory and technical body mandated to coordinate national cybersecurity efforts and enhance the protection of the country’s digital systems and networks.
The Agency has been established through the National Cybersecurity Agency Order, 2026, issued by President William Ruto pursuant to the provisions of the State Corporations Act (Cap. 446).
“Establishment of the Agency marks a significant step in Kenya’s efforts to secure its rapidly expanding digital ecosystem and safeguard critical information infrastructure that supports national security, public service delivery, economic activity and the daily lives of millions of Kenyans”, the ministry said.
Over the last decade, Kenya has emerged as one of Africa’s leading digital economies, driven by advancements in mobile money, digital financial services, e-government platforms, telecommunications, health information systems, education technology and online commerce.
It further said the developments have expanded opportunities for innovation, investment and service delivery, including increased exposure to cyber threats targeting both public and private sector systems.
Data breaches
Cybercrime, ransomware attacks, online fraud, identity theft, malicious software, data breaches, misinformation campaigns and attacks on critical digital infrastructure continue to pose growing risks to national security, economic stability and public confidence in digital services.
As such, the ministry said the agency will provide a coordinated national framework for preventing, detecting, responding to and recovering from cyber threats.
“As government institutions, businesses and citizens become increasingly reliant on digital technologies, strengthening cybersecurity has become a national priority. It will serve as Kenya’s central technical and regulatory institution on cybersecurity matters and will work closely with Government agencies, security institutions, regulators, industry players, academia, development partners and international cybersecurity networks”, it explained in a release.
Core functions
The Agency will formulate and oversee the implementation of national cybersecurity strategies across the public and private sectors; audit and certify the cybersecurity resilience of designated critical information infrastructure; manage the National Cybersecurity Operations Centre; support sector-based cybersecurity operations centres; conduct technical assessments of digital networks; identify emerging vulnerabilities; issue technical advisories; and coordinate national responses to cybersecurity incidents.
It will also establish a Cybersecurity Centre of Excellence to promote research, innovation, skills development and the creation of locally developed cybersecurity solutions.
In addition, it will lead efforts to address the country’s cybersecurity skills gap through professional certification programmes, specialised training and technical capacity-building initiatives. Recognising that cybersecurity is a shared responsibility, the Agency will serve as a platform for collaboration between government, industry, academia and international partners to strengthen resilience across all sectors of the economy.
It will also facilitate information sharing, promote best practices and support the harmonisation of cybersecurity standards and frameworks.
Composition
To ensure a whole-of-government approach to cybersecurity, the Agency’s Board will bring together representation from key national institutions, including Internal Security, the National Treasury, Information, Communications and the Digital Economy, the Office of the Attorney-General, the Kenya Defence Forces, the National Police Service, the National Intelligence Service and the Office of the Director of Public Prosecutions, alongside representatives from academia and the private sector.
“The establishment of the National Cybersecurity Agency reflects the Government’s recognition that cybersecurity is no longer solely a technical issue but a strategic national security, economic and governance priority”, the Ministry emphasised.
The government further assured it remains committed to building robust cybersecurity capabilities that protect national interests while supporting innovation, economic growth and public trust in digital systems.
It called upon public institutions, private sector organisations, academic institutions and all stakeholders to work closely with the National Cybersecurity Agency in building a secure, resilient and trusted digital ecosystem for the benefit of all Kenyans.
The post Parliament approves establishment of National Cybersecurity Agency appeared first on KBC Digital.