Kenya has taken a major step towards strengthening its digital security framework following Parliament’s approval of the National Cybersecurity Agency (NCSA) Order, 2026.
The approval paves the way for the establishment of the National Cybersecurity Agency, an autonomous regulatory and technical body tasked with coordinating cybersecurity efforts and protecting the country’s growing digital infrastructure.
In a press release issued by the Ministry of Interior on June 22, 2026, the Government described the move as a significant milestone in safeguarding critical information infrastructure that supports national security, public service delivery, economic activity and the daily lives of millions of Kenyans.
The Agency has been established through the National Cybersecurity Agency Order, 2026, issued by President William Ruto under the provisions of the State Corporations Act.
According to the Ministry, the NCSA will serve as Kenya’s central institution on cybersecurity matters, providing a coordinated framework for preventing, detecting, responding to and recovering from cyber threats.
Growing Digital Economy Raises Cybersecurity Concerns
The establishment of the Agency comes at a time when Kenya’s digital economy continues to expand rapidly. Growth in mobile money services, e-government platforms, telecommunications, online commerce, education technology and health information systems has increased opportunities for innovation and investment.
The Ministry noted that cybercrime, ransomware attacks, online fraud, identity theft, data breaches and attacks on critical infrastructure continue to pose serious threats to national security, economic stability and public confidence in digital services.
Among its key functions, the Agency will formulate and oversee national cybersecurity strategies, audit and certify the resilience of critical information infrastructure, manage the National Cybersecurity Operations Centre and coordinate responses to cybersecurity incidents.
Skills Development and Partnerships Key to Long-Term Resilience
Beyond regulation and incident response, the NCSA will establish a Cybersecurity Centre of Excellence to promote research, innovation and skills development.
The Agency is also expected to address the country’s cybersecurity skills gap through professional certification programmes, specialized training and technical capacity-building initiatives.
The Government said the Agency will foster collaboration among public institutions, private sector organizations, academia and international partners to strengthen cybersecurity resilience across all sectors of the economy.
The Ministry of Interior emphasized that cybersecurity is no longer solely a technical issue but a strategic national security, economic and governance priority.
