Kenya is set to bolster its digital security framework following the approval by Parliament of the establishment of the National Cybersecurity Agency, a new institution mandated to coordinate the country’s cybersecurity efforts and safeguard critical digital infrastructure.
The move comes amid rising concerns over cyber threats targeting government systems, financial institutions, private sector platforms, and essential national databases. Lawmakers supported the proposal, citing the need for a centralized authority to streamline response mechanisms, improve threat detection, and enhance national resilience against increasingly sophisticated cyberattacks.
Strengthening National Cyber Defence
The newly approved agency is expected to work closely with existing security and technology institutions to monitor, prevent, and respond to cyber incidents. Its core mandate will include protecting government digital systems, supporting incident response coordination, and developing national cybersecurity standards.
It will also be tasked with improving information sharing between public and private sector actors, a move aimed at closing gaps that cybercriminals often exploit.
Addressing Rising Cyber Threats
Kenya has in recent years experienced a steady increase in cyber-related incidents, including phishing attacks, ransomware attempts, and breaches targeting financial and government platforms. With the country’s rapid digital transformation—especially in mobile money, e-government services, and digital identification systems—lawmakers emphasized the urgency of a stronger, unified cybersecurity structure.
The establishment of the agency is expected to complement existing efforts by institutions such as the Communications Authority of Kenya and national security organs that currently oversee aspects of cybersecurity regulation and enforcement.
Expected Impact
Once operational, the National Cybersecurity Agency is anticipated to enhance Kenya’s preparedness against cyber threats by:
Coordinating national cybersecurity policy implementation
Enhancing incident detection and response capabilities
Supporting cybersecurity awareness and training programs
Strengthening collaboration with international cybersecurity bodies
Protecting critical infrastructure such as banking, energy, and government systems
Digital Safety and Economic Growth
Proponents of the legislation argue that stronger cybersecurity protections will not only improve national security but also boost investor confidence in Kenya’s digital economy. As more services move online, ensuring trust and safety in digital systems is seen as essential for sustained economic growth.
The implementation timeline and leadership structure of the agency are expected to be outlined in subsequent government gazette notices and policy directives.