The country losses an estimated Sh29B annually to cyber attacks
NAIROBI, 22nd June 2026 -The National Assembly has approved the establishment of the National Cybersecurity Agency (NCSA), setting a decisive step toward safeguarding Kenya’s rapidly expanding digital economy under the leadership of President William Ruto.
The development comes on the heels of stark warnings from Interior Security and Narional Administration Cabinet Secretary (CS) Kipchumba Murkomen, who revealed that Kenya is losing an estimated Sh29 billion annually to cybercrime.
“These digital threats are soaring in both scale and sophistication, increasingly powered by artificial intelligence (AI),” he told the National Assembly Delegated Committee recently.
The NCSA is designed to be Kenya’s frontline defense against a wave of high-profile digital disruptions.
To address this,CS Murkomen recently detailed a string of severe incidents to the House Committee, including the 2023 distributed denial-of-service (DDoS) attack on the eCitizen portal, critical disruptions during the 2024 Finance Bill unrest, and comprehensive government website defacements in 2025.
“Major data breaches were experienced at the Kenya Bureau of Statistics (KEBS), and a highly sophisticated May 2026 ransomware attack on the Kenya National Highways Authority (KeNHA),” he highlighted to the lawmakers.
Welcoming the House’s approval, Interior Security Principal Secretary (PS)Dr Raymond Omollo emphasized that the NCSA will operate as an autonomous body.
“It will directly coordinate national cybersecurity efforts, safeguard critical information infrastructure, and provide rapid response to emerging threats like ransomware, data breaches, and coordinated misinformation campaigns,” he explained.
To execute this mandate, the ministry is seeking Sh4 billion to fully fund the agency’s rollout. This initial investment will cover the establishment of a state-of-the-art National Cybersecurity Operations Centre, and rigorous auditing of all critical government and financial systems.
“It will also include robust policy development and enhanced cyber hygiene awareness for the public and the acquisition of cutting-edge security tools, software subscriptions, and advanced threat-detection infrastructure.”
Beyond local defense, the establishment of the NCSA is a strategic move to secure Kenya’s reputation on the world stage. With a population exceeding 50 million, the country boasts between 23.4 million and 27.4 million active internet users, driven by a staggering 140 percent mobile penetration rate. Crucially, Kenyans transact over Sh500 billion daily via mobile money platforms.
By anchoring the NCSA under the State Corporations Act governed by a multi-sectoral board bridging security, finance, justice, and intelligence, Kenya is signaling to international markets that its digital financial systems heavily fortified.
The agency will also establish a specialized Centre of Excellence dedicated to cultivating advanced digital security skills. By fostering deep collaboration between the government, private industries, academia, and international cybersecurity bodies, the NCSA ensures that Kenya’s growing digital economy remains robust, secure, and highly trusted by global investors.
“Timely investment in cybersecurity is critical to safeguarding citizens, businesses, and government systems as Kenya accelerates its digital transformation agenda,” CS Murkomen concluded.
“The NCSA will close existing governance gaps, improve incident response, and firmly position Kenya as a premier, trusted digital economy partner globally.”
