NAIROBI – In a major step to fortify its digital defences, the Kenyan government has unveiled plans to establish a National Cybersecurity Agency. Announced by ICT and Digital Economy Principal Secretary John Tanui, the proposed body aims to protect citizens’ data, secure critical government systems, and position Kenya as a leading cybersecurity hub in Africa.
Coordinating the National Cyber Defence
According to PS Tanui, the new agency has already received Cabinet approval and will be tabled in Parliament following final consultations. Its core mandate will be to strengthen the national coordination of responses to cyber threats while complementing the work of existing structures like the Office of the Data Protection Commissioner (ODPC).
“Cybersecurity is a critical area. It is not a problem of Kenya alone; it is a global challenge, and we must put the right structures in place to protect our digital space,” Tanui stated, emphasising the urgency of the initiative.
He highlighted that the agency’s foundation is the protection of personal data, praising the ODPC for its work in making Kenya an attractive destination for investment by establishing robust data protection structures and regional offices.
Aiming for International Trust and Local Opportunity
Beyond immediate security, the move is tied to strategic economic goals. Tanui noted that Kenya is working to meet international data protection standards, with the aim of engaging Europe on “data adequacy” by 2026. Achieving this status would signify that Kenya’s data protection framework is trusted and respected globally, facilitating cross-border data flows and trade.
The PS also framed cybersecurity as a significant employment frontier, pointing to a global shortage of 1.3 million skilled professionals. He encouraged Kenyan youth to study cybersecurity skills to seize opportunities in various sectors, from government and healthcare to international roles.
Anchoring Kenya’s Digital Ambition
The planned agency is central to Kenya’s ambition to become Africa’s go-to centre for cybersecurity solutions. Tanui expressed a clear vision: “We expect that if someone has a cybersecurity problem in Africa, they should come to Kenya for a solution.”
He added that with the rise of artificial intelligence, the importance of cybersecurity will only intensify, making such an agency essential for national readiness. The government has already taken steps to bolster public-sector capacity by ensuring every State department has a director-level ICT head prioritizing cybersecurity in management meetings.
Tanui concluded by expressing confidence in Kenya’s current resilience, noting that the country has managed cyber incidents without major disruptions, even as major global platforms face frequent attacks.
