institutions etc.
Conduct regular cyber
incident
and
crisis
management
exercises. Participate in
international exercises.
Robust
cybersecurit
y ecosystem
Establish a strategic
plan
on
the
protection
of
National
Critical
Information
Infrastructure
Promote
cooperation and
understanding of
cybersecurity risks
in all critical sectors
Establish a strategic
plan on the protection
of NCII containing the
criteria for service
criticality as well as
description of impact of
service disruption. The
plan includes incentives
for collaboration with
the identified NCII
operators
and
supervision
mechanisms.
Update the strategic
plan regularly based on
national
level
risk
assessments.
Assess
mutual
dependences of the
systems and services of
various CNII operators.
Share
the
threat
intelligence
and
encourage
the
operators to a more
implemented
based
on
adequate
understanding
of the risks
Cyber incident
and
crises
management
processes
are
tested
and
effective.
Uganda experts
have
participated in
international
exercises.
NITA-U,
MDAs, NCII
operators,
sectoral
regulators
MoICT
&NG,
MoS
Supervisory
authorities, both
central
and
sectoral,
are
aware of their
roles .
NCII operators
are
informed
and aware of
of
the
cybersecurity
requirements for
critical
infrastructure.
NITA-U,
NISAG,
Sectoral
Regulators
MoICT
&NG,
MoS
A
common
threat
intelligence
is
shared and NCII
operators apply
appropriate
security
measures based
NITA-U,
NISAG,
Sectoral
Regulators
MoICT
&NG,
MoS
37 (43)
[Draft Version for stakeholder consultation]
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents