The Ministry of Interior and National Administration welcomed the Parliament's decision, noting that the NCSA, as an autonomous body, will coordinate Kenya's cybersecurity efforts. In a press release, the ministry explained that the approval of the NCSA ordinance will strengthen and protect Kenya's digital infrastructure. "The Ministry welcomes the approval by Parliament of the resolution on the National Cybersecurity Agency of 2026, a key step in establishing a national authority to regulate and coordinate cybersecurity, as well as strengthen the protection of Kenya's digital infrastructure," reads a part of the press release. After the resolution is approved, President William Ruto will proceed with the creation of the NCSA.
In accordance with the Law on State Corporations (Chapter 446) and on the basis of official Notification No. 89 dated May 25, the agency is established by presidential decree. NCSA will be responsible for expanding the digital ecosystem and protecting critical information infrastructure that supports national security, government services, and economic activities for Kenyans. In addition, parliamentary approval allows NCSA to combat ransomware attacks, identity theft, large-scale data leaks and disinformation campaigns in Kenya.
The Agency also has the authority to protect critical information infrastructure supporting government services and online commerce. According to the 2026 decree, the agency, whose offices will be located in Nairobi, received from Parliament the right to create specialized satellite units throughout the country. NCSA is responsible for developing and overseeing national cybersecurity strategies for both the public and private sectors. In addition, the agency will ensure infrastructure protection by auditing and certifying the sustainability of designated critical information facilities.
NCSA's responsibilities, according to the approved resolution, include managing the day-to-day operations of the National Cybersecurity Center and supporting industry centers. In addition, NCSA will establish cybersecurity centers to promote local innovation, research, and professional certification programs to address national staff shortages. According to President Ruto, the creation of such centers will make it possible to fill the gaps in skills through specialized certification programs and technical curricula.
Acting as technical consultants, NCSA will assess the vulnerabilities of digital networks and issue technical recommendations to interested parties. With parliamentary approval, NCSA is empowered to develop and enforce technical guidelines to mitigate the effects of unauthorized network intrusions and large-scale disruptions. The Board of Directors will manage the agency, and its chairman will be appointed by the President on a non-executive basis.
The council will include representatives of the Ministry of the Interior (the supervising agency), the National Treasury, the Ministry of ICT and Digital Economy, the Attorney General's Office, the Kenya Defense Forces (KDF), the National Police Service, the National Intelligence Service (NIS), as well as representatives of the Office of the Director of Public Prosecutions. Two more members representing the private and academic sectors will be appointed to the board.
To maintain administrative and financial autonomy, the agency will appoint a Director General on a competitive basis. To apply for this position, the candidate must be a Kenyan citizen, have a master's degree, and have at least ten years of experience in leadership positions in fields such as cybersecurity, law, or economics. In addition, a corporate secretary responsible for keeping minutes of board meetings and ensuring compliance with the law will be appointed to support the management. The agency's financial activities will be supported by parliamentary appropriations, fees for services, as well as approved grants or donations.
Over the past decade, Kenya has become one of Africa's leading digital economies due to advances in mobile payments, digital financial services, e-government platforms, telecommunications, health information systems, educational technology, and online commerce. The Ministry also noted that these achievements have expanded opportunities for innovation, investment, and service provision, while increasing exposure to cyber threats directed at both the public and private sectors.
Cybercrime, ransomware attacks, online fraud, identity theft, malware, data leaks, disinformation campaigns, and attacks on critical digital infrastructure continue to pose growing risks to national security, economic stability, and public trust in digital services. In this regard, the ministry stated that the agency will provide a coordinated national framework for preventing, detecting, responding to, and recovering from cyber threats.
Comments (0)