Facing growing cyber threats, Kenya plans a centralized cybersecurity authority 🇰🇪 🛡️

Cliquez ici pour lire en français

As cyber threats continue to grow and digital transformation accelerates, Kenya is preparing to establish a National Cybersecurity Agency. The new body is designed to strengthen the country’s response to cyberattacks, secure critical infrastructure, and improve the protection of personal data nationwide.

An institutional response to rising digital threats 🔐

By 2026, the Kenyan government plans to launch a National Cybersecurity Agency, known as the NCSA. The announcement was made by John Tanui, Cabinet Secretary for ICT and the Digital Economy, during a technology-focused event.

According to Tanui, cybersecurity is no longer a niche concern. It now affects governments, businesses, and citizens alike. As Kenya continues to digitize public and private services, its institutions must evolve to confront increasingly sophisticated cyber threats. The proposal has already received approval from the Cabinet and is expected to be submitted to Parliament following consultations with the Ministry of Interior.

A central authority to coordinate cybersecurity efforts 🏢

The future agency’s primary role will be to centralize cybersecurity governance at the national level. William Kabogo, Cabinet Secretary for Information and the Digital Economy, confirmed that the NCSA will serve as Kenya’s central cybersecurity authority.

The agency will oversee the National Cybersecurity Operations Center and coordinate sector-specific cybersecurity units. These units operate across sensitive areas such as defense, finance, energy, healthcare, and other critical infrastructure. The goal is to improve threat anticipation, accelerate incident response, and harmonize cybersecurity practices across sectors.

In addition, the NCSA will be responsible for setting national standards, accrediting cybersecurity training programs, and ensuring compliance with existing regulations. It is expected to play a key role in structuring and strengthening Kenya’s broader digital security ecosystem.

A legal framework that still needs strengthening ⚖️

The creation of the NCSA builds on an existing regulatory foundation. Kenya has had a Data Protection Act in place since 2019, governing the handling of personal data and imposing transparency obligations on organizations. The country also adopted a Computer Misuse and Cybercrimes Act in 2018, which was revised in 2025 to expand law enforcement’s operational capabilities.

At the same time, Kenya’s National Cybersecurity Strategy for 2022–2027 serves as a roadmap to improve coordination, enhance technical capacity, and develop local expertise. The country is also in the process of ratifying the Budapest Convention, a key international treaty on combating cybercrime.

Consolidating Kenya’s position as an African cybersecurity leader 🌍

Internationally, Kenya is often cited as one of Africa’s leading countries in cybersecurity. According to the International Telecommunication Union’s 2024 Global Cybersecurity Index, Kenya ranks 21st worldwide and third in Africa. The country scores particularly well in international cooperation, capacity building, and institutional organization.

That said, the report also points to areas for improvement, especially in regulatory and technical measures. The establishment of a National Cybersecurity Agency could help close these gaps and further strengthen Kenya’s digital resilience.

By opting for more centralized governance and better coordination among stakeholders, Kenya aims to secure its digital space more effectively. This step is widely seen as essential to building public trust, attracting investment, and supporting the long-term growth of the country’s digital economy.

👉🏾  Do you believe that creating a national cybersecurity agency has become essential for African countries as cyber threats continue to evolve? Share your thoughts and join the conversation.