3.2 Threat preparedness and response Promote risk assessment practices based on central risk repository Publish regularly Cyber Threat Landscape Report Develop central incident register and sectoral incident scenarios Threat preparedness and response Strengthen national and sectoral CERTs Develop tools for information sharing Establish programs for a capacity building about risk management 3.2.1 Risk management It is important to realise that cybersecurity incidents can never be completely prevented. The rapid development of technology and its accelerated spread also increases the potential for security incidents. Therefore, in addition to preventing incidents, the focus must also be on cyber resilience – i.e. on the control and reduction of damage caused by incidents. This requires two types of action: first, proactive measures aimed at preventing incidents, and second, reactive ones to control and reduce damage. Figure 6. Measures to achieve cyber resilience. Continuous gathering and analysis of information on security incidents both domestically and internationally makes the rapid identification of threats possible and the resolution of incidents more effective. Therefore, Uganda will put continuous effort to identify and understand potential threats (threat intelligence) and the risks associated with these threats (risk awareness). There is also a need for resources to detect and cope with incidents (incident management) and to plan activities and resources to deal with the damage caused by incidents (recovery). The existence of such measures will, on the one hand, increase the ability to prevent incidents by increasing overall security and, on the other hand, significantly reduce the adverse impact of incidents on society. [1] 19 (43) [Draft Version for stakeholder consultation]