Kenya is set to strengthen its digital security framework following parliamentary approval of the National Cybersecurity Agency (NCSA) Order, 2026, paving the way for the establishment of a new agency tasked with coordinating and regulating cybersecurity efforts across the country.
The Ministry responsible for ICT welcomed the approval, describing it as a major milestone in safeguarding Kenya’s growing digital economy and critical information infrastructure.
“The National Cybersecurity Agency will serve as an autonomous regulatory and technical body mandated to coordinate national cybersecurity efforts and enhance the protection of Kenya’s digital infrastructure,” the Ministry said in a statement.
The agency has been established through the National Cybersecurity Agency Order, 2026, issued by President William Ruto under the provisions of the State Corporations Act.
According to the Ministry, the move comes at a time when Kenya’s rapid adoption of digital technologies has created new opportunities for innovation and economic growth while simultaneously exposing institutions and citizens to increasing cyber threats.
“Cybercrime, ransomware attacks, online fraud, identity theft, data breaches and attacks on critical digital infrastructure continue to pose growing risks to national security, economic stability and public confidence in digital services,” the statement noted.
Officials said the new agency will provide a coordinated national framework for preventing, detecting, responding to and recovering from cyber threats. It will also work closely with government agencies, security institutions, regulators, private sector players, academic institutions and international partners.
Among its key responsibilities, the NCSA will formulate and oversee the implementation of national cybersecurity strategies, audit and certify critical information infrastructure, manage the National Cybersecurity Operations Centre and coordinate responses to cybersecurity incidents.
“The Agency will serve as Kenya’s central technical and regulatory institution on cybersecurity matters and will support efforts to strengthen resilience across both public and private sector systems,” the Ministry stated.
The agency will also establish a Cybersecurity Centre of Excellence aimed at promoting research, innovation, skills development and the creation of locally developed cybersecurity solutions.
The government says the establishment of the NCSA marks a significant step in protecting critical digital systems that support public service delivery, economic activities and the daily lives of millions of Kenyans as the country continues its digital transformation journey.
Senate Committee Seeks More Clarity on Nairobi-National Government Cooperation Agreement
