Kenya is set to strengthen its digital defenses after Parliament approved the establishment of the National Cybersecurity Agency (NCSA), a move aimed at coordinating and regulating cybersecurity across the country.
In a statement released on Monday June 22, 2026, the Ministry of Interior welcomed the approval of the National Cybersecurity Agency Order, 2026, describing it as a major milestone in safeguarding Kenya’s rapidly expanding digital infrastructure and online ecosystem.
According to the Ministry, the new agency will operate as an autonomous regulatory and technical body mandated to coordinate national cybersecurity efforts and enhance protection of critical information systems.
“The National Cybersecurity Agency (NCSA) will be an autonomous regulatory and technical body mandated to co-ordinate all national cybersecurity efforts and strengthen the protection of the country’s digital infrastructure,” the statement read in part.
“The Agency has been established through the National Cybersecurity Agency Order, 2026, issued by H.E. President William Samoei Ruto, CGH, Commander-in-Chief of the Kenya Defence Forces, pursuant to the provisions of the State Corporations Act (Cap. 446),” the statement added.
Officials say the move comes at a time when Kenya’s digital economy has grown significantly, driven by mobile money services, e-government platforms, digital financial systems, telecommunications, health tech, education technology, and e-commerce.
While these advancements have improved service delivery and innovation, authorities warn they have also increased exposure to cyber threats, including ransomware attacks, online fraud, identity theft, data breaches, and misinformation campaigns.
“The establishment of the National Cybersecurity Agency marks a significant step in securing Kenya’s digital ecosystem and protecting critical information infrastructure that supports national security, economic activity, and public service delivery,” the Ministry said.
The agency will also serve as the central institution for cybersecurity coordination, working with government departments, security agencies, regulators, private sector players, academia, and international partners.
Among its core functions will be the development and implementation of national cybersecurity strategies, auditing and certifying critical infrastructure, managing the National Cybersecurity Operations Centre, and coordinating responses to cyber incidents.
It will also establish a Cybersecurity Centre of Excellence to promote research, innovation, and the development of local cybersecurity solutions, while addressing the country’s skills gap through training and certification programmes.
Authorities say the initiative is aimed at building a more resilient digital environment as reliance on technology continues to grow across all sectors.
