Figure 5. Areas of protected computers according to the Computer Misuse Act 2011. The establishment of security baseline for protected computers, programs or data in sectors specified in NISF and Computer Misuse Act (2011) has been the tool to address the national critical information infrastructure (NCII) protection in Uganda. However, Legislation and regulation do not provide for obligations for cyber-incident reporting, which remains ad-hoc activity and thereby exacerbates the potential impact of incidents. Latest development in the area is the Strategic Plan on the protection of National Critical Information Infrastructure approved by NITA-U in 2021. The document describes critical infrastructure sectors, the CNII operators as well as their role. 2.5 Digital Awareness With the rapid growth of internet connectivity on the African continent, many Ugandans are getting access and connecting to the internet for the first time, while often lacking knowledge on how to protect themselves online. [10] Low levels of ICT literacy would make it difficult to launch awareness campaigns, which the Global Cybersecurity Capacity Centre found to be almost non-existent in the African countries it surveyed. In 2017, 90% of African businesses were operating below the cybersecurity ‘poverty line’ – unprepared for cyber threats and an easy preys to cybercriminals. [11] The Government of Uganda has realized that cybersecurity awareness is crucial and considerable awareness raising efforts, coupled with increasing availability, access and affordability have been undertaken. These efforts include concerted ICT security awareness campaigns led by the MoICT & NG, NITA-U and UCC. For example, a review of NITA statistics report 2019 indicates Sensitization activities to enhance cyber legal awareness have been conducted over the years. In financial year 2018/19, there was an increment of 20 percent in the number of awareness sessions conducted across the Ministries, Departments and Agencies (MDAs) and Local Governments. In July 2021, NITA-U embarked on a digital driven awareness campaign on cybersecurity with funding from the Regional Communications Infrastructure Program. The development and continuous implementation of cybersecurity awareness initiatives focusing on disseminating 14 (43) [Draft Version for stakeholder consultation]