Members of Parliament in session at the Parliament Buildings/FILE
Parliament has approved the establishment of the National Cybersecurity Agency (NCSA), paving the way for the creation of a new institution tasked with coordinating Kenya’s cybersecurity efforts and protecting the country’s rapidly expanding digital infrastructure.
In a statement on Monday, the Interior Ministry welcomed the approval of the National Cybersecurity Agency Order, 2026, describing it as a major milestone in strengthening the country's capacity to prevent, detect and respond to cyber threats.
The agency will operate as an autonomous regulatory and technical body responsible for coordinating national cybersecurity initiatives and safeguarding critical information infrastructure that supports government services, economic activity and national security.
According to the Ministry, the agency was established through the National Cybersecurity Agency Order, 2026, issued by President William Ruto under the State Corporations Act.
"The creation of the agency comes at a time when Kenya's digital economy continues to expand through growth in mobile money, digital financial services, e-government platforms, telecommunications, health information systems, education technology and online commerce," the ministry stated.
While these advancements have created new opportunities for innovation, investment and service delivery, they have also exposed public and private institutions to growing cybersecurity threats.
The ministry noted that cybercrime, ransomware attacks, online fraud, identity theft, malicious software, data breaches, misinformation campaigns and attacks on critical digital infrastructure remain significant risks to national security, economic stability and public confidence in digital services.
“As government institutions, businesses and citizens become increasingly reliant on digital technologies, strengthening cybersecurity has become a national priority,” the Ministry said.
The agency will provide a coordinated national framework for preventing, detecting, responding to and recovering from cyber threats.
It will serve as Kenya's central technical and regulatory institution on cybersecurity matters and will work closely with government agencies, security institutions, regulators, industry players, academia, development partners and international cybersecurity networks.
Among its key responsibilities, the agency will formulate and oversee the implementation of national cybersecurity strategies across both the public and private sectors.
It will also audit and certify the cybersecurity resilience of designated critical information infrastructure, manage the National Cybersecurity Operations Centre, support sector-based cybersecurity operations centres and coordinate national responses to cybersecurity incidents.
The agency will further conduct technical assessments of digital networks, identify emerging vulnerabilities and issue technical advisories aimed at improving cybersecurity preparedness across the country.
In addition, the NCSA will establish a Cybersecurity Centre of Excellence to promote research, innovation, skills development and locally developed cybersecurity solutions.
The government said the centre will help address the country's cybersecurity skills gap through professional certification programmes, specialised training and technical capacity-building initiatives.
Recognising cybersecurity as a shared responsibility, the agency will serve as a platform for collaboration between government institutions, the private sector, academia and international partners.
“The establishment of the National Cybersecurity Agency reflects the Government’s recognition that cybersecurity is no longer solely a technical issue but a strategic national security, economic and governance priority,” the ministry said.
The government added that a secure digital environment is critical for protecting public institutions, safeguarding citizens' data, supporting business continuity, attracting investment and advancing Kenya’s digital transformation agenda.
