Kenya Establishes Cybersecurity Agency to Protect Critical Infrastructure

NAIROBI, June 22, 2026 — Kenya has moved to strengthen its digital security framework following Parliament’s approval of the National Cybersecurity Agency (NCSA), a new institution mandated to coordinate national cybersecurity efforts and safeguard critical information infrastructure from growing cyber threats.

In a statement, the Ministry of Interior and National Administration said the agency will serve as an autonomous technical and regulatory body responsible for coordinating cybersecurity operations across both the public and private sectors.

The approval comes at a time when Kenya is experiencing rapid digital growth, with increased adoption of online government services, digital financial systems, e-commerce platforms, health information systems and technology-driven business operations. While these advancements have expanded opportunities for innovation and service delivery, they have also exposed the country to sophisticated cyber threats.

According to the ministry, cybercrime, ransomware attacks, online fraud, identity theft, malicious software, data breaches and attacks on critical digital infrastructure continue to pose significant risks to national security, economic stability and public confidence in digital services.

The National Cybersecurity Agency has been established to provide a coordinated national framework for preventing, detecting, responding to and recovering from cyber incidents. Officials said the agency will serve as Kenya’s central technical and regulatory institution on cybersecurity matters.

Among its core functions, the agency will formulate and oversee the implementation of national cybersecurity strategies, audit and certify the cybersecurity resilience of designated critical information infrastructure, manage the National Cybersecurity Operations Centre and support sector-based cybersecurity operations centres.

The institution will also conduct technical assessments of digital networks, identify emerging vulnerabilities, issue cybersecurity advisories and coordinate national responses to cybersecurity incidents affecting both government and private sector systems.

In addition, the agency will establish a Cybersecurity Centre of Excellence aimed at promoting research, innovation, skills development and the creation of locally developed cybersecurity solutions. The centre is also expected to help bridge the country’s cybersecurity skills gap through professional certification programmes, specialized training and technical capacity-building initiatives.

Recognizing cybersecurity as a shared responsibility, the government said the agency will foster collaboration among government institutions, security agencies, regulators, industry players, academia, development partners and international cybersecurity networks.

Its governing board will bring together representatives from key national institutions including Internal Security, the National Treasury, Information, Communications and the Digital Economy, the Office of the Attorney-General, the Kenya Defence Forces, the National Police Service, the National Intelligence Service and the Office of the Director of Public Prosecutions, alongside representatives from academia and the private sector.

The government said the establishment of the National Cybersecurity Agency reflects a growing recognition that cybersecurity is no longer merely a technical issue but a strategic national security, economic and governance priority.

Officials expressed confidence that the agency will play a critical role in protecting public institutions, safeguarding citizens’ data, supporting business continuity, attracting investment and advancing Kenya’s digital transformation agenda as the country continues positioning itself as a regional technology and innovation hub.