Multi-agency committee formed to coordinate cybersecurity matters

An open computer at home logged into the internet/FILE

A multi-agency committee has been established under the Computer Misuse and Cybercrimes Act (CMCA) of 2018 to coordinate national cybersecurity matters and strengthen Kenya’s defences against digital threats.

The National Computer and Cybercrimes Coordination Committee (NC4) will spearhead the implementation of the amended Cybercrimes Act, which was assented to by President William Ruto on Wednesday, October 15.

NC4 is mandated to coordinate national efforts for the timely and effective detection, prevention, response, investigation, and prosecution of computer misuse and cybercrimes.

It will also facilitate international cooperation in addressing computer and cybercrime matters affecting Kenya.

The committee brings together key state institutions involved in national security, ICT, intelligence, and financial systems, reflecting the government’s intent to treat cybersecurity as a cross-cutting security priority.

Its membership comprises the Principal Secretary in the Ministry of Interior and National Administration, who will chair the committee; the Principal Secretary in the Ministry of Information, Communications and The Digital Economy; the Attorney-General; the Chief of the Kenya Defence Forces; the Inspector-General of the National Police Service; and the Director-General of the National Intelligence Service.

Other members include the Director-General of the Communications Authority of Kenya, the Director of Public Prosecutions, the Governor of the Central Bank of Kenya, the Director of the NC4 Secretariat, and the Office of the Data Protection Commissioner.

Co-opted members are drawn from the Kenya Revenue Authority, the Financial Reporting Centre, the National Cohesion and Integration Commission, the ICT Authority, and the Assets Recovery Agency.

The NC4 will advise the National Security Council on computer and cybercrime issues and provide guidance to the government on security aspects related to critical information infrastructure and emerging technologies such as blockchain, artificial intelligence, 5G, and the Internet of Things.

It will also approve the identification and designation of critical information infrastructure, formulate cybersecurity codes of practice and performance standards, and oversee compliance by infrastructure owners.

Additionally, the committee will evaluate cybersecurity audit and compliance reports, approve the development and management of the National Public Key Infrastructure frameworks, and consider reports on emerging technologies and their implications for national security.

NC4 will coordinate national security organs in matters related to computer and cybercrimes, receive and act on reports of cyber incidents, and facilitate frameworks to ensure the availability, integrity, and confidentiality of critical information systems.

Through cooperation with local and international incident response teams, the committee is expected to strengthen Kenya’s readiness to counter cyber threats and promote research, training and public awareness on cybersecurity matters.

The establishment of NC4 marks a major step in aligning Kenya’s cybersecurity governance with global best practices, underscoring the government’s growing recognition of digital security as a cornerstone of national resilience and economic stability.