Kenya has taken a major step towards strengthening its digital security infrastructure after Parliament approved the establishment of the National Cybersecurity Agency (NCSA), a new institution tasked with coordinating and regulating cybersecurity efforts across the country.
In a statement, the Ministry of Interior and National Administration welcomed Parliament’s approval of the National Cybersecurity Agency Order, 2026, describing it as a critical milestone in safeguarding Kenya’s rapidly expanding digital ecosystem.
“The autonomous body will coordinate national cybersecurity efforts, safeguard critical information infrastructure and respond to emerging threats such as ransomware attacks, data breaches and misinformation campaigns,”said Ps Omollo in a statement.
The agency, established through an order issued by President William Ruto under the State Corporations Act, will operate as an autonomous technical and regulatory body responsible for coordinating national cybersecurity initiatives and protecting critical digital infrastructure.
According to the ministry, Kenya’s rapid adoption of digital technologies, including mobile money, e-government services, online commerce, telecommunications and digital health systems, has significantly transformed service delivery and economic activity.
However, the growth has also exposed the country to increasing cyber threats targeting both public and private sector systems.
Officials noted that cybercrime, ransomware attacks, online fraud, identity theft, malware infections, data breaches and attacks on critical infrastructure continue to pose growing risks to national security, economic stability and public trust in digital services.
The National Cybersecurity Agency will provide a centralized framework for preventing, detecting, responding to and recovering from cyber threats.
Among its key responsibilities will be overseeing the implementation of national cybersecurity strategies, auditing the resilience of critical information infrastructure, managing the National Cybersecurity Operations Centre and coordinating responses to cybersecurity incidents.
The agency will also conduct technical assessments of digital networks, identify emerging vulnerabilities, issue cybersecurity advisories and support sector-based cybersecurity operations centres across the country.
In addition, the government said the agency will establish a Cybersecurity Centre of Excellence to promote research, innovation and the development of local cybersecurity solutions.
The centre is also expected to address the country’s cybersecurity skills gap through professional certification programmes, specialized training and capacity-building initiatives.
Recognizing cybersecurity as a shared responsibility, the agency will bring together government institutions, regulators, security agencies, academia, development partners and private sector players to strengthen resilience against cyber threats.