The threat environment and criminal landscape is in constant change, which means that the Government needs new tools, approaches and creativity for incident management at MDAs, NCII operators, police and law enforcement to stand a chance. Uganda will clarify common interests of various stakeholders and create appropriate tools or methods for information sharing. Communication and information sharing both within public sector and private sector and between public and private sector is a prerequisite for efficient response to incidents. Sound incident and crisis management plans as well as general knowledge about threat landscape guarantees the preparedness for incidents. Uganda will draft and establish national and sectoral incident resolution plans as a part of national emergency planning and crises management. Testing the rules and plans for information sharing and incident management guarantee their efficiency. Uganda will regularly conduct cyber drills. Cyberdrills will be organised both within teams and at the national level. 3.2.3 Action Areas To be prepared to threats and guarantee a sustainable national level cyber risk management and response system, GoU will: a) Promote risk assessment practices based on central risk repository & regularly publish the Cyber Threat Landscape Report. GoU will establish a mechanism for regular threat intelligence and analysis at strategic and tactical level. That shall include collection and analysis of the information about strategic threat vectors such as geopolitical tensions, increasing cybercrime etc. as well as technical information of cyber-attacks, characteristics of malware etc. Common cyber risk assessment methodology will be established for MDAs and NCII operators. The National Information Risk Register will provide up-to-date information about current cybersecurity risks and allows to observe and predict trends. b) Develop central incident register and sectoral incident scenarios. GoU will establish the mandatory incident reporting for NCII and government sector and develop clear guidelines for reporting. NITA-U will manage an aggregated national level incident register. GoU will generate sector-based risk scenarios for incident management and prepare national and sectoral incident resolution plans as a part of national emergency planning and crises management. c) Strengthen national and promote sectoral CERTs. GoU will enhance capacity and capability for incident response especially heavily focusing on the proactive approach, increasing capacity building for first level incident responders and home grown re-usable security monitoring solutions for organisations. d) Develop tools for information sharing. GoU will foster cooperation and communication between security, law enforcement and other government agencies and provide a Cyber Threat Intelligence information sharing framework. National emergency planning and crises management will be enhanced through the development of large-scale cyber incident management plans. e) Establish programs for capacity building in the risk management. GoU will establish capacity building programs for sectors hat have less resources for cybersecurity such as MSMEs, healthcare institutions. 21 (43) [Draft Version for stakeholder consultation]