FOREWORD The Information and Communications Technology (ICT) domain is now part of our core fundamental areas that have been identified to spur Uganda’s socio-economic development as enshrined within the National Vision 2040. Today, ICT is one of the leading drivers for social-economic growth globally. The Aspiration of the Government of Uganda is to support Uganda’s economic competitiveness growth enabled by ICT. Embedded within, is to achieve a state of harmonized and interoperable digital infrastructure for Government of Uganda as our strategic goal through building the appropriate secure ICT Infrastructure, creating an enabling environment as well as developing and promoting use of e-Government for efficient service delivery. Over the years, the private sector has made similar investments towards incorporation of ICT within their various business models. Pillar three of the Digital Uganda Vision (2020) addresses ‘Cyber Security and Data Privacy’. This pillar provides assurance that digital services are safe, secure, protected, and trusted and when in use. This pillar further seeks to ensure that the country builds capacity for cybersecurity management. In line with this, the information and processes held on this digital infrastructure is critical to the wellfunctioning of the country. The more we increase our adoption and investment in ICT, the more we increase our risk exposure. This therefore necessitates we adopt cyber security as a culture in our usage of ICT based on the principles of confidentiality, integrity and availability. Currently, the threat towards digital infrastructure and applications is not only eminent but more sophisticated, persistent and disastrous. With this in mind, countries are increasing improving their cyber security focus to protect their digital infrastructure as well as defend against cyber-attacks. At the national level, Government of Uganda has led several cyber security initiatives aimed towards improving Uganda’s information security maturity level. In light of the above, the complex and interconnected nature of the cyber space is such that ensuring holistic cyber security becomes a shared responsibility between the Government, Private Sector and other stakeholders. Part of our country’s national critical information infrastructure is run by the private sector. A resilient National approach towards Cyber Security requires the involvement of all key stakeholders (both state and non-state actors), whether at national and international level based on collaboration, which is the intent of this strategy. The development of this strategy has been a collaborative initiative within the public and private ICT sub sector stakeholders. The National Cyber Security Strategy sets the direction for improvement of our National Cyber Security capabilities to achieve the highest cyber security maturity level. As we implement this strategy, we will be promoting trust amongst our citizens in the usage of ICT enabled services, defending our digital infrastructure against threats as well as contributing to international cyber security. The Strategy further demonstrates our commitment to ensuring that our adoption of ICT supports the country’s improved competitiveness. ______________________________________ Hon. Dr. Chris Baryomunsi Minister for ICT & National Guidance 5 (43) [Draft Version for stakeholder consultation]