Kenya Parliament Approves National Cybersecurity Agency to Strengthen Digital Security
Established under the State Corporations Act through a presidential order issued by President William Ruto, the new agency will operate as an autonomous body responsible for coordinating national cybersecurity efforts, protecting critical infrastructure, and improving the country’s ability to respond to cyber threats.
Kenya has taken a significant step toward strengthening its cyber resilience after Parliament approved the National Cybersecurity Agency Order, 2026, paving the way for the creation of the National Cybersecurity Agency (NCSA).
Established under the State Corporations Act through a presidential order issued by President William Ruto, the new agency will operate as an autonomous body responsible for coordinating national cybersecurity efforts, protecting critical infrastructure, and improving the country’s ability to respond to cyber threats.
The NCSA will oversee the National Cybersecurity Operations Centre and coordinate sector-specific cybersecurity units across government institutions and critical industries. Its mandate includes monitoring cyber risks, conducting security audits of essential infrastructure, issuing technical guidance on emerging threats, and supporting incident response activities.
In addition, the agency will establish a Cybersecurity Centre of Excellence aimed at promoting research, innovation, and skills development in cybersecurity. The center is expected to work closely with universities, regulators, industry stakeholders, and security agencies to strengthen cybersecurity capacity and encourage knowledge sharing.
The agency’s governing board will bring together representatives from key government institutions, including the National Treasury, security agencies, intelligence services, law enforcement bodies, the ICT sector, academia, the Attorney-General’s office, and private sector stakeholders. The multi-sector approach is intended to enhance collaboration and improve the country’s cybersecurity preparedness.
The establishment of the NCSA comes as Kenya’s digital economy continues to expand, increasing the importance of protecting digital infrastructure, government systems, financial services, and communication networks from evolving cyber threats.
At the same time, the agency’s creation has sparked discussions about governance and accountability. Analysts note that while stronger cybersecurity capabilities are essential, maintaining transparency and clear oversight mechanisms will be equally important to ensure that cybersecurity powers are exercised responsibly.
As Kenya accelerates its digital transformation agenda, the effectiveness of the National Cybersecurity Agency will likely be measured not only by its ability to combat cyber threats but also by its capacity to build public trust and maintain a balance between security, accountability, and digital rights.
