
In a statement dated June 22, the ministry said the NCSA will operate as an autonomous regulatory and technical body. It will coordinate national cybersecurity initiatives and help protect the country’s digital infrastructure.
“Establishment of the Agency marks a significant step in Kenya’s efforts to secure its rapidly expanding digital ecosystem and safeguard critical information infrastructure that supports national security, public service delivery, economic activity, and the daily lives of millions of Kenyans,” the statement said.
The ministry added that the approval followed a request by the government for Ksh4 billion to set up the agency. In the document tabled before Parliament, officials pointed to the need to strengthen responses to digital security threats.
Interior Cabinet Secretary Kipchumba Murkomen said the agency will help close operational gaps linked to fraud, ransomware, data breaches, and attacks on critical infrastructure.
Murkomen said Kenya has become one of Africa’s most targeted countries, noting that ICT-related attacks are increasing in scale and complexity. He attributed the trend to the country’s wider adoption of emerging technologies, including artificial intelligence (AI).
The NCSA will develop and supervise national cybersecurity strategies, manage the National Cybersecurity Operations Center, and support sector-based cybersecurity operations centers. It will also conduct audits and certify critical infrastructure, carry out vulnerability assessments, issue technical advisories, and coordinate responses to cyber incidents.
In addition, the agency will set up a Cybersecurity Centre of Excellence to advance research in digital security. It will also roll out training and certification programmes to tackle the country’s cybersecurity skills gap.
The agency was established through the National Cybersecurity Agency Order, 2026, issued by President William Ruto on May 15. The order provides for a multi-agency board that will guide the NCSA’s work.
The board will include officials from the National Treasury, the ICT Ministry, the Attorney-General’s Office, the Kenya Defence Forces (KDF), the National Police Service (NPS), the National Intelligence Service (NIS), and the Office of the Director of Public Prosecutions (ODPP). It will also include representatives from academia and the private sector.
