Figure 4. Major categories of cybercrimes [8]. In addition to economic crimes, cybersecurity threats pose a serious risk to the integrity of the egovernment system and internet in Uganda generally. [7] The Uganda Police Force has digital forensics capacity and a cyber-crime unit. The cybercrime unit helps the Police to participate and get knowledge on current trends on cybersecurity. Police in collaboration with National Information Technology Authority – Uganda and Uganda Communications Commission have published several cybercrime awareness materials and initiated thematic campaigns. Cybercrime is reported to have had a 300% fold growth in the year 2020 [8], thus the need for capacity building and increase in cybersecurity awareness is urgent to cope with the increasing number of cybercrimes. 2.4 Protection of Critical Infrastructure In 2011, the Government of Uganda developed the National Information Security Strategy (NISS) supporting sub-sector policies and frameworks within the ICT sector to secure critical national infrastructure and information resources. NISS recognizes the importance of the identification of critical infrastructure that are critical for the functioning of the society as a whole. In 2016 the protection of Uganda’s Critical Information Infrastructure and cyberspace was identified as one of 5 strategic goals of the draft cybersecurity strategy. The Computer Misuse Act 2011 provides guidance on sectors that are currently recognized as Critical National Infrastructure sectors in Uganda. According to the Act, a “protected computer” is a computer, program or data used directly in connection with or necessary for the security, defence or international relations of Uganda; law enforcement; the provision of services directly related to communications infrastructure, banking and financial services, public utilities; public key infrastructure and public safety. The 2014 National Information Security Policy and Framework (NISF) with its compulsory security measures applies to all organisations that operate protected computers. Policy is established by NITA-U. 13 (43) [Draft Version for stakeholder consultation]