Parliament Approves Creation of National Cybersecurity Agency

Parliament has approved the establishment of the National Cybersecurity Agency (NCSA), paving the way for the creation of a new autonomous body tasked with coordinating Kenya’s cybersecurity efforts and protecting the country’s critical digital infrastructure.

The approval follows the adoption of the National Cybersecurity Agency Order, 2026, issued by President William Ruto under the State Corporations Act, marking a significant shift in Kenya’s approach to managing cyber threats amid rapid digital transformation.

According to a statement released by the Ministry of Information, Communications and the Digital Economy on Monday, the agency will serve as the country’s central technical and regulatory institution on cybersecurity matters, bringing together government agencies, security institutions, regulators, private sector players, academia and international partners to strengthen digital resilience.

“The establishment of the National Cybersecurity Agency reflects the Government’s recognition that cybersecurity is no longer solely a technical issue but a strategic national security, economic and governance priority,” the ministry said.

Kenya’s digital economy has expanded significantly over the past decade, driven by innovations in mobile money, e-government services, telecommunications, digital banking, e-commerce and online education platforms. However, the rapid digitization of services has also increased exposure to cyber threats, including ransomware attacks, online fraud, data breaches, identity theft and attacks targeting critical information infrastructure.

The government says the new agency will provide a coordinated national framework for preventing, detecting, responding to and recovering from cyber incidents.

Among its responsibilities, the NCSA will oversee the implementation of national cybersecurity strategies, audit and certify the resilience of critical information infrastructure, manage the National Cybersecurity Operations Centre, conduct technical assessments of digital networks and coordinate responses to cybersecurity incidents.

The agency will also establish a Cybersecurity Centre of Excellence aimed at promoting research, innovation and skills development while addressing the country’s growing shortage of cybersecurity professionals through certification and training programmes.

Its board will comprise representatives from key government institutions, including the National Treasury, Interior Ministry, Kenya Defence Forces, National Police Service, National Intelligence Service, Office of the Attorney-General and the Office of the Director of Public Prosecutions, alongside members from academia and the private sector.

The move comes as cyber threats continue to rise globally and across Africa. Recent reports have shown increasing attacks on government systems, financial institutions and private enterprises, prompting countries to invest heavily in cybersecurity capabilities and regulatory frameworks.

The government argues that a secure digital environment is critical to protecting citizens’ data, supporting business continuity, attracting investment and advancing Kenya’s ambitions of becoming a regional technology and innovation hub.

As Kenya continues expanding access to digital services under its digital transformation agenda, officials say the new agency will play a central role in safeguarding public institutions, businesses and citizens from evolving cyber risks while supporting innovation and economic growth.

The government has called on public institutions, private sector organizations and academic institutions to collaborate with the agency in building what it described as a “secure, resilient and trusted digital ecosystem” for all Kenyans.

Read: Banks to Benefit from CBK’s New Cybersecurity Hub

>>> Court Declares Computer Misuse and Cybercrimes Act Constitutional