Parliament has approved the establishment of a National Cybersecurity Agency in Kenya, aimed at coordinating the country's response to digital threats. This decision comes as Kenya's digital economy grows and raises questions about how to protect infrastructure that increasingly relies on software and networks. Currently, Kenya has several existing cyber institutions addressing these challenges.

The Ministry of Interior in Kenya has announced a Ksh4 billion plan to establish a National Cybersecurity Agency (NCSA) following approval from Parliament. This agency will function as an autonomous body to coordinate national cybersecurity initiatives and protect the country's digital infrastructure, addressing the increasing cyber threats faced by Kenya. The establishment of the NCSA is seen as a significant step in securing Kenya's expanding digital ecosystem.

Kenya experienced over three billion cyberattack attempts aimed at government systems, businesses, and critical digital infrastructure in the three months leading up to June. This surge underscores the escalating cybersecurity threats confronting the nation, which is recognized as one of Africa's rapidly advancing digital economies. The findings are detailed in a report by the National Computer and Cybercrime Coordination Committee (NC4).

Kenya’s High Court has ruled that several key provisions of the Computer Misuse and Cybercrimes (Amendment) Act, 2025 are unconstitutional, a decision that has been positively received by digital rights organizations. The ruling was delivered by Justice Patricia Nyaundi at the High Court in Milimani, following a petition filed by the Kenya Section of the International Commission of Jurists (ICJ Kenya) and ARTICLE 19.

Kenya and China have reaffirmed their commitment to enhancing cooperation in information and communication technology (ICT), digital transformation, and innovation during a recent meeting. This partnership aims to strengthen ties and promote advancements in these sectors between the two nations.

Mastercard has launched an Africa Cybersecurity Centre of Excellence in South Africa and Nigeria, with support from Recorded Future's threat intelligence. However, Kenya is not included in the first phase of this initiative.