Kenya Launches National Cybersecurity Agency to Bolster Digital Defense

• Kenya has launched a new National Cybersecurity Agency to bolster its digital defenses amidst a sharp rise in cyberattacks.
• The agency's establishment under Legal Notice No. 89 of 2026 provides a new legal framework for coordinating national cybersecurity matters.
• Interior Cabinet Secretary Kipchumba Murkomen emphasized that cybersecurity is now a national security priority, not merely an ICT concern.
• The move follows a 114.3% increase in Distributed Denial-of-Service (DDoS) attacks, reaching 72.16 million by June 2026.
• The agency is tasked with strengthening the National Cybersecurity Operations Centre to improve real-time threat detection and response.

Cybersecurity is no longer merely an ICT concern. It is a matter of national security, economic security, public safety and national sovereignty.

The Kenyan government has officially launched a new National Cybersecurity Agency, tasking it with significantly bolstering the nation's digital defenses. This crucial development comes at a time when Kenya is experiencing a dramatic increase in cyberattacks targeting its digital infrastructure. Interior Cabinet Secretary Kipchumba Murkomen inaugurated the agency's board in Nairobi, emphasizing the urgent need for robust measures to safeguard the country's online environment.

During the inauguration, CS Murkomen specifically directed the newly formed agency to prioritize the enhancement of the National Cybersecurity Operations Centre. The objective is to improve Kenya's capability to detect, analyze, and respond to evolving cyber threats in real-time. This directive underscores the government's commitment to strengthening Kenya's cyber defense capabilities amidst a challenging digital landscape.

The urgency of this initiative is highlighted by recent Kenya cyberattack statistics. Data from the Communications Authority of Kenya reveals a staggering surge in Distributed Denial-of-Service (DDoS) attacks, which escalated to 72.16 million in the year concluding June 2026. This figure represents a substantial 114.3 percent increase compared to the preceding year, underscoring the escalating threat level faced by the nation's digital systems.

The establishment of the National Cybersecurity Agency marks a pivotal moment in Kenya's regulatory approach to digital security. This autonomous regulatory and technical body was formally constituted under Legal Notice No. 89 of 2026 Kenya, providing a clear legal framework for its operations. Its primary mandate is to coordinate all national cybersecurity matters, signifying a centralized and comprehensive strategy for managing digital risks.

This new institutional framework is designed to streamline Kenya's response to the growing array of cyber threats. As government services, private businesses, and other critical operations increasingly rely on digital systems, the agency's role in ensuring their resilience becomes paramount. The creation of such a dedicated entity reflects a strategic shift towards proactive governance in the digital domain.

Principal Secretary for Internal Security and National Administration, Raymond Omollo, who was present at the inauguration, affirmed that the agency will play a vital role in strengthening the country's overall cybersecurity architecture. He further noted that the body would enhance Kenya's capacity to prevent, detect, and effectively respond to emerging digital threats, thereby securing the nation's digital future.

Interior Cabinet Secretary Kipchumba Murkomen articulated a clear vision for the role of cybersecurity, stating that it transcends mere information and communications technology concerns. Speaking at Harambee House, he declared that "Cybersecurity is no longer merely an ICT concern. It is a matter of national security, economic security, public safety and national sovereignty." This statement firmly positions cybersecurity as a critical component of national well-being and governance.

Murkomen issued a direct challenge to the agency's board, chaired by Dr. Martin Koyabe, urging them to act swiftly in fortifying critical infrastructure protection and developing the necessary technical expertise to safeguard Kenya's cyberspace. He specifically reiterated his expectation for the board to build the capacity of the National Cybersecurity Operations Centre, ensuring its ability to detect, analyze, and coordinate responses to threats in real-time. This focus on operational readiness is central to Kenya's cyber defense strengthening efforts.

The government has pledged its full support to the board as it embarks on its mandate to secure the country's digital infrastructure. This commitment underscores the high-level importance placed on the agency's success in protecting Kenya's digital assets and ensuring the continuity of essential services in an increasingly interconnected world.

The establishment of the National Cybersecurity Agency under Legal Notice No. 89 of 2026 signals a significant increase in regulatory oversight and enforcement in Kenya's cybersecurity landscape. Lawyers and compliance officers should advise clients to proactively review and strengthen their cyber resilience frameworks, anticipating new compliance obligations and stricter penalties for cybersecurity breaches.

Source: Original reporting via Capital FM Nairobi