Kenya’s Cybersecurity Agency Gets Its First Board Chair

Kenya has appointed Dr Martin Koyabe as the inaugural non-executive chair of the National Cybersecurity Agency board, and the appointment lands at a time when digital security is becoming a national economic issue.

Principal Secretary for ICT and Digital Economy John Tanui announced the appointment, according to regional coverage. The agency is expected to play a central role as Kenya pushes digital transformation and targets a larger digital-economy contribution to GDP.

Koyabe’s background gives the appointment weight. Reports describe him as a UK-based Kenyan cybersecurity expert with experience in cyber capacity building and international digital-security work. That matters because Kenya’s cybersecurity challenge is no longer only domestic.

Kenya has a large fintech sector, a major mobile-money economy, expanding public digital services and growing interest in cloud, AI and digital identity. All of those systems create value, but they also widen the attack surface.

A national cybersecurity agency is useful only if it can coordinate across government, industry and critical infrastructure. Banks, telcos, hospitals, public agencies, schools and digital platforms all sit inside the same risk environment, even when they are regulated separately.

The timing also connects to Kenya’s digital ID ambitions. We recently wrote about Kenya’s digital ID talks putting trust back at the centre. Identity, payments and cybersecurity cannot be treated as separate policy islands.

For Kenya, the cyber task is practical. The country needs stronger incident reporting, better public-sector security, clearer private-sector obligations, skilled responders, law-enforcement coordination and enough technical capacity to deal with attacks before they become national service disruptions.

Africa has already seen how telecom and financial infrastructure can be disrupted. UNITEL’s Angola recovery after a cyberattack and Ghana’s cybersecurity licensing enforcement both show that regulators are moving from speeches to action.

The new chair will therefore inherit a difficult job: building trust in the agency while avoiding bureaucracy that slows innovation. Kenya needs cyber governance that is serious enough to protect critical systems but practical enough for startups and digital businesses to comply with.

Koyabe’s appointment is a governance story, but it is also a signal. Cybersecurity is now part of how African countries build digital economies, not something added after the platforms are already exposed.