1. GOVERNMENT OF UGANDA PLANS FOR INFORMATION SECURITY ASSURANCE PETER KAHIIGI, CISSP®. DIRECTOR INFORMATION SECURITY 30th JANUARY 2013 Directorate of Information Security 20131

2. The National Information Technology of Uganda Established by an Act of Parliament (National Information Technology Authority, Uganda Act of 2009). Mandate: To coordinate, promote and monitor Information Technology development within the context of National Social and Economic development. Vision: A globally competitive Uganda through information technology. Mission: To transform Uganda into a knowledge-based society by leveraging IT as a strategic resource to enhance government services, enrich business and empower citizens. Directorate of Information Security 2013

3. Functions of Directorate of Information Security 1.To provide leadership, organizational structures and processes at National level that safeguard information against accidental or unauthorized modification, destruction, or disclosure 2.To coordinate efforts to respond to information security related incidents and threats. 3.To coordinate with other institutions, including law enforcement, to identify and plan for security in all aspects of data, applications, hardware, telecommunications, and computer installations. 4.To provide information security assurance for MDA, LGs and critical infrastructure. Directorate of Information Security 2013

4. Information Security Directorate of Information Security 2013 Means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction Involves protection of: 1.Confidentiality 2.Integrity 3.Availability of user data (analog or digital, in transit or at rest) Protection is with the help of: 1.Physical controls 2.Technical controls 3.Administrative controls

5. Progress made thus far by GoU on Information Security Directorate of Information Security 2013 1.National Information Security Strategy in place. 2.Setup a Directorate for Information Security. 3.National Information Security Advisory Group. 4.UG-CERT establishment in cooperation with UCC & ITU. 5.Establishment of International cooperation on IS.

6. IS Assurance roadmap Directorate of Information Security 2013

7. Bonus: 2013 Information Security watch list for Uganda Directorate of Information Security 2013 1.Increase in mobile platform attacks (Android, iOS, Windows mobile, Symbian, etc.) 2.Increased BYOD uptake. 3.Increased cyber fraud attempts in public and private sectors. 4.Increased privacy concerns for the cloud. 5.More organized and sophisticated cyber attacks.

8. 8 Q & A Directorate of Information Security 2013

9. Thank You! Directorate of Information Security 2013