The government has previously identified cyberspace as critical to the functioning of online services.Kenya is moving to strengthen oversight and coordination of its digital space as the government steps up efforts to operationalise the National Cybersecurity Agency following parliamentary approval of its establishment.
The agency's formation is among the measures highlighted in the government's latest implementation scorecard, which shows that while key milestones have been achieved, the institution is not yet fully operational.
In a communique following the 15th National Development Implementation Committee – Governance and Public Administration Sub-Committee meeting chaired by Principal Secretary for Internal Security and National Administration Dr Raymond Omollo, the government said immediate focus had shifted to putting in place the institutional structures and personnel required for the agency to begin functioning effectively.
The Director General has already been recruited and deployed, while the government is progressing the recruitment and deployment of other key technical and administrative personnel.
The government is also pursuing outstanding Board appointments, including representatives from academia and industry.
Once operational, the agency is expected to strengthen national coordination and technical capacity in cybersecurity, an increasingly important task as more government, business and citizen services move online.
The government's latest update marks a shift from establishing the agency in law to building the institutional machinery required for it to function.
Parliament received the explanatory memorandum for Legal Notice No. 89 of 2026, relating to the National Cybersecurity Agency Order, 2026, from the Ministry of Interior and National Administration in June.
The development formed part of wider government efforts to strengthen Kenya's cybersecurity architecture.
The government has previously identified cyberspace as critical to online services, the digital economy, communications, and other public and private-sector activities.
A national security assessment warned that the rapid adoption of digital technologies had created new risks to individuals, businesses, critical infrastructure and government systems.
Kenya's existing cybersecurity framework has also relied on the National Computer and Cybercrimes Coordination Committee, which brings together key public-sector cybersecurity actors under the Computer Misuse and Cybercrimes Act.
A 2025 government report on the implementation of Kenya's international obligations said the multi-agency approach through the committee was intended to support a whole-of-society approach to national cybersecurity.
"Once operationalised, the Agency will strengthen national coordination and technical capacity in cybersecurity," the comunique said.
The new agency is therefore expected to add institutional capacity to an existing framework rather than replace cybersecurity coordination altogether.
