The Kenyan government is set to create a new National Cybersecurity Agency (NCSA) after Parliament approved the National Cybersecurity Agency Order, 2026.
The agency will coordinate national efforts to combat cybercrime, protect critical digital infrastructure, and respond to growing cyber threats. It will work with government institutions, security agencies, private sector players, academic institutions, and international partners to strengthen cybersecurity.
Its key roles will include developing cybersecurity strategies, overseeing the protection of critical information systems, managing the National Cybersecurity Operations Centre, and coordinating responses to cyber incidents.
The move comes amid rising concerns over cybercrime, including ransomware attacks, online fraud, identity theft, data breaches, and malware. Between January and March 2026, Kenya’s KE-CIRT/CC detected 3.37 billion cyber threat events and issued 20.58 million cybersecurity advisories to help address emerging digital risks.
The new agency is expected to strengthen Kenya’s digital security and improve cyber resilience across public and private sectors.
