Parliament Approves National Cybersecurity Agency as Kenya Moves to Strengthen Digital Security
Kenya’s growing reliance on digital services has brought convenience to millions of people. This covers everything from mobile money, online banking to e-government services and e-commerce.
But, it has also exposed the country to rising cyber threats, including online fraud, data breaches, identity theft and attacks on critical digital systems.
It is against this backdrop that Parliament has approved the establishment of the National Cybersecurity Agency (NCSA).
This paves the way for a dedicated institution to coordinate and strengthen the country’s cybersecurity efforts.
The new agency will serve as Kenya’s central body for cybersecurity regulation, coordination and technical response.
It has been established through the National Cybersecurity Agency Order, 2026, and will operate as an autonomous institution tasked with protecting the country’s expanding digital infrastructure.
What’s the new agency all about?
Over the past decade, Kenya has emerged as one of Africa’s most digitised economies.
Mobile money, digital financial services, online commerce, health systems and government platforms have become part of everyday life.
However, the growth of digital services has also increased exposure to cybercrime and other online threats.
The government says the agency will provide a coordinated national framework for preventing, detecting and responding to cyber incidents, while helping institutions recover from attacks when they occur.
What the real purpose of the agency?
Among its responsibilities, the National Cybersecurity Agency will oversee national cybersecurity strategies and coordinate responses to cyber threats.
In addition, it’s meant to conduct technical assessments of digital networks and strengthen the protection of critical information infrastructure.
It will also manage the National Cybersecurity Operations Centre and issue advisories on emerging cyber risks.
The agency is also expected to support the development of local cybersecurity expertise through training programmes, professional certification and the establishment of a Cybersecurity Centre of Excellence focused on research and innovation.
What’s the broader digital agenda?
The establishment of the agency reflects a growing recognition that cybersecurity is no longer just an ICT issue.
As more public services, businesses and financial transactions move online, digital security has become increasingly linked to national security, economic stability and public trust.
The agency’s board will bring together representatives from key government institutions.
These includes security agencies, the National Treasury, the ICT sector, the Attorney-General’s office and other stakeholders, reflecting a whole-of-government approach to digital security.
In a Nutshell ….
The creation of the National Cybersecurity Agency marks another step in Kenya’s digital transformation journey.
As the country continues to expand access to digital services and position itself as a regional technology hub, strengthening cybersecurity will be critical to protecting citizens, supporting businesses and maintaining confidence in the digital economy.