By Karim Were
Regulator says cybersecurity must go beyond technical compliance as Uganda expands digital services, artificial intelligence and online commerce
KAMPALA — The Uganda Communications Commission (UCC) has called on technology companies, cybersecurity professionals and digital-service providers to make public trust a central measure of cybersecurity as Uganda’s digital economy continues to expand.
The regulator says protecting digital systems can no longer be viewed simply as a matter of installing security tools or meeting regulatory requirements. Technology providers must also ensure that citizens feel safe using online services and that organisations can detect attacks, contain incidents and restore services quickly.
The call was made by Dr Christine Mugimba, UCC’s Director of ICT and Research, during the 15th Annual East Africa Information Security Conference in Kampala on September 16, 2026.
Mugimba said cybersecurity strategies should focus not only on preventing attacks but also on the ability of organisations to respond effectively when security incidents occur.
The message comes as Uganda expands digital services across banking, mobile money, government, education, health, commerce and other sectors.
With more services moving online, a major cyber incident affecting one part of the digital ecosystem could potentially affect other connected services, making resilience and public confidence increasingly important.
UCC calls for a broader approach to cybersecurity
Mugimba told technology-sector stakeholders that cybersecurity should be measured by more than the presence of technical safeguards.
According to UCC, organisations need to be capable of detecting threats early, fixing vulnerabilities, containing incidents and restoring affected services.
The regulator also emphasised the importance of ensuring that ordinary citizens understand and trust the digital platforms they use.
The message reflects a broader shift in cybersecurity thinking, where resilience and user confidence are increasingly considered alongside traditional network protection.
A system may have sophisticated security infrastructure, but if customers do not trust it or cannot obtain reliable assistance after an incident, confidence in the wider digital service can decline.
UCC therefore wants technology companies and industry leaders to consider cybersecurity from the perspective of the people who depend on digital platforms every day.
Digital trust becomes increasingly important
Uganda’s digital economy has expanded significantly in recent years, increasing the number of people and businesses that depend on telecommunications and online services.
The Ministry of ICT and National Guidance currently lists more than 40 million mobile subscriptions, more than 17 million internet subscriptions, over 1,466 government offices connected to fibre, more than 4,400 kilometres of fibre coverage and 17 innovation hubs among indicators of Uganda’s growing ICT infrastructure.
These developments have increased the importance of digital security.
Mobile money, online banking, electronic government services, digital education platforms and online commerce all depend on systems that must protect information and remain available to users.
As more people rely on these services, disruptions can have consequences beyond the technology sector.
A telecommunications outage, data breach or compromise of an important digital platform can affect businesses, government agencies and individuals simultaneously.
For this reason, cybersecurity has increasingly become an issue of economic resilience and public confidence as well as a technical concern.
Technology systems are increasingly interconnected
One of the issues highlighted at the East Africa Information Security Conference was the interconnected nature of modern digital infrastructure.
Telecommunications networks, financial institutions, cloud services, government systems and other digital platforms often depend on one another.
This interconnectedness can create efficiency, but it can also increase the potential impact of a disruption.
A weakness in one part of a connected system can create problems elsewhere, particularly when organisations share infrastructure, data or digital services.
UCC has therefore urged technology stakeholders to think about cybersecurity across the wider digital ecosystem rather than protecting individual systems in isolation.
The regulator’s position is that resilience must extend from individual organisations to the broader infrastructure on which Uganda’s digital economy depends.
Artificial intelligence creates new security challenges
The expansion of artificial intelligence is adding another dimension to Uganda’s technology and cybersecurity debate.
AI systems are increasingly being incorporated into business, education, research, government services and other areas.
At the same time, AI can make it easier to create convincing synthetic images, audio, video and text.
UCC has warned that emerging technologies can make it more difficult for users to distinguish authentic information from manipulated digital content.
The issue is significant because public trust in digital platforms depends partly on users’ ability to determine whether information is genuine.
As generative AI tools become more accessible, organisations may have to develop stronger methods for verifying digital content, authenticating communications and identifying fraudulent activity.
This could increase the importance of digital literacy alongside conventional cybersecurity measures.
Uganda develops framework for responsible AI
The cybersecurity discussion is taking place alongside Uganda’s efforts to establish a framework for artificial intelligence and other emerging technologies.
The Ministry of ICT and National Guidance has been conducting consultations on a National AI and Emerging Technologies Strategy.
According to the ministry, the strategy is intended to guide the adoption and governance of rapidly developing technologies while ensuring that they contribute to national development and economic growth.
Stakeholder consultations have involved government agencies, academia, the private sector, civil society and technology innovators across sectors including agriculture, health, finance, education, tourism, manufacturing and research.
In June, the ministry and UNESCO also validated Uganda’s AI Readiness Assessment Report.
The assessment used UNESCO’s Readiness Assessment Methodology to examine Uganda’s preparedness to adopt and govern artificial intelligence responsibly and ethically.
These efforts indicate that the country’s technology agenda is increasingly focused not only on adoption but also on governance, accountability and responsible use.
Government strengthens information security framework
The government has also taken steps to strengthen cybersecurity within public institutions.
In July, the Ministry of ICT and National Guidance launched the Updated National Information Security Framework 2026, intended to guide government institutions in strengthening cybersecurity and protecting Uganda’s growing digital infrastructure.
ICT Minister Justine Kasule Lumumba said at the launch that information security had become more than an ICT concern because of the growing role of digital systems in public services, economic activity and national security.
The framework is designed to provide government institutions with a stronger basis for protecting information systems as public services increasingly move online.
The government’s approach places information security within the broader digital-transformation agenda.
That is significant because the expansion of digital public services means government agencies increasingly handle sensitive personal and administrative information electronically.
Private sector also faces growing responsibility
While government has responsibility for public digital infrastructure, technology companies and private-sector organisations control many of the platforms used by citizens every day.
Banks, telecommunications companies, mobile-money providers, online retailers, cloud-service providers and software companies all handle data or provide services that can be affected by cyber threats.
UCC’s call for public trust therefore places responsibility on private-sector technology providers as well as government agencies.
Maurice Taremwa, president of the ISACA Kampala Chapter, cautioned cybersecurity professionals against developing technical policies that distance ordinary users from the systems they are expected to use.
The focus, he argued, should be on whether everyday consumers actually feel protected when interacting with digital services.
This means security measures must be designed with usability in mind.
Complex security procedures that users do not understand or cannot follow effectively may undermine rather than strengthen protection.
Cybersecurity requires skilled people
Technology alone cannot guarantee digital security.
UCC and industry representatives have also highlighted the importance of investing in skilled cybersecurity professionals who can identify vulnerabilities, respond to incidents and maintain digital systems.
As technology becomes more sophisticated, organisations need personnel capable of understanding both established security risks and emerging threats.
This includes expertise in areas such as network security, data protection, cloud computing, artificial intelligence and incident response.
The demand for such skills is likely to grow as Uganda’s digital economy expands.
Universities, technology hubs and private-sector training programmes can therefore play an important role in developing the workforce required to support the country’s digital transformation.
Busitema opens new digital innovation hub
Uganda’s push to expand technology skills is also being reflected in new innovation infrastructure.
On September 15, Busitema University opened an MTN Spark Hub, providing students and members of the surrounding community with access to digital tools, internet connectivity, training and mentorship.
The initiative was launched through a partnership involving the Ministry of ICT and National Guidance, MTN Uganda Foundation, MTN Uganda, Centenary Technology Services, AniScholar, UCC and Busitema University.
The Ministry of ICT said the hub is intended to help young people develop digital skills and turn ideas into practical solutions.
The initiative is particularly relevant to Uganda’s technology ambitions because the country has a young population and growing demand for digital skills.
The ministry has noted that about 75 per cent of Uganda’s population is below the age of 30, creating both a large potential technology workforce and a significant population of digital-service users.
From access to meaningful digital participation
Expanding internet connectivity is only one part of digital transformation.
Citizens also need the skills, confidence and security protections necessary to use digital services effectively.
This is where the concepts of digital literacy and digital trust become important.
A person may have access to a smartphone and an internet connection but still be vulnerable to fraud, misinformation, phishing or identity theft if they do not understand basic digital-security practices.
Similarly, a business may have access to digital payment systems but face serious disruption if it lacks adequate cybersecurity measures.
Technology policy therefore increasingly needs to address access, skills, security and trust together.
Protecting personal data
The growth of digital services also increases the importance of protecting personal information.
Users routinely provide names, telephone numbers, identification details, financial information and other personal data when accessing online platforms.
Poor security practices can expose such information to unauthorised access.
Uganda has established the Personal Data Protection Office as part of its broader data-protection framework, while cybersecurity and information-security measures are being developed across government and the private sector.
For technology companies, public trust is closely connected to how responsibly they collect, store, process and protect personal information.
Clear privacy policies and effective security controls can help users understand how their information is handled.
Technology and access to justice
The role of technology is also expanding into Uganda’s legal and justice sectors.
At the second annual Uganda Law Society Digital Transformation Festival held in Kampala on September 17 and 18, Attorney General Sam Mayanja called for responsible adoption of technology in the justice system.
The festival was held under the theme “Digital Democracy: Advancing Access to Justice, Innovation, and Ethical Governance through Technology.”
Mayanja said digital transformation should expand access to justice while protecting professional ethics, confidentiality, cybersecurity and the rule of law.
The justice sector illustrates how technology’s benefits and risks increasingly exist side by side.
Digital platforms can improve access to information and services, but legal institutions must also protect confidential information and ensure that technological systems comply with professional and legal standards.
The economic importance of cybersecurity
Cybersecurity is increasingly connected to Uganda’s wider economic ambitions.
Businesses depend on digital systems for payments, communication, logistics, customer management and record keeping.
A prolonged cyber incident could interrupt business operations, undermine customer confidence and create financial losses.
For larger companies, security breaches can also damage relationships with customers and business partners.
For smaller businesses, the effects can be particularly significant because many may have limited resources for cybersecurity and recovery.
This makes awareness, affordable security tools and accessible expertise important components of Uganda’s digital-economy strategy.
Building resilience rather than simply preventing attacks
No digital system can be assumed to be completely immune from cyber threats.
The emphasis on resilience therefore represents an important part of the current cybersecurity debate.
Organisations need to prepare for the possibility that an attack may succeed despite preventive measures.
That means establishing systems for detecting unusual activity, responding rapidly, isolating affected systems, communicating with users and restoring normal operations.
Such preparations can reduce the potential damage caused by security incidents.
They can also strengthen public confidence by demonstrating that an organisation has a clear plan for dealing with disruptions.
What public trust means for technology companies
For technology companies, UCC’s message creates a broader definition of cybersecurity responsibility.
Security cannot be treated solely as an internal technical function.
Companies also need to consider how customers experience security, how quickly incidents are communicated and whether users can obtain assistance when something goes wrong.
Transparent communication can be particularly important after a security incident.
Users need reliable information about what happened, what information may have been affected and what steps they should take.
Failing to communicate effectively can deepen uncertainty even when technical teams are working to resolve the problem.
Uganda’s next phase of digital transformation
Uganda’s technology sector is entering a phase in which digital adoption is increasingly accompanied by discussions about governance, security and responsible innovation.
The development of an AI strategy, the validation of the country’s AI readiness assessment, the updated National Information Security Framework and investment in digital innovation hubs are all part of that broader transition.
The challenge will be ensuring that technological expansion does not outpace the country’s ability to protect users and maintain confidence in digital services.
That will require cooperation between government regulators, technology companies, universities, cybersecurity professionals and consumers.
Conclusion
Uganda’s digital economy is expanding rapidly, but the country’s technology regulators say growth must be accompanied by stronger cybersecurity and public confidence.
UCC’s latest call for technology companies to place public trust at the centre of cybersecurity reflects the growing dependence of citizens and businesses on digital platforms.
The challenge extends beyond protecting computer networks. It includes safeguarding personal information, responding effectively to cyber incidents, developing skilled professionals and ensuring that emerging technologies such as artificial intelligence are adopted responsibly.
Government initiatives, including the updated National Information Security Framework and work on an AI and Emerging Technologies Strategy, show that Uganda is developing policies to address these challenges.
At the same time, initiatives such as the MTN Spark Hub at Busitema University demonstrate the importance of developing the skills needed to participate in an increasingly digital economy.
Ultimately, the sustainability of Uganda’s digital transformation will depend not only on how many people can access technology, but also on whether they can use it safely, confidently and responsibly.
That is significant because the expansion of digital public services means government agencies increasingly handle sensitive personal and administrative information electronically.
Private sector also faces growing responsibility
While government has responsibility for public digital infrastructure, technology companies and private-sector organisations control many of the platforms used by citizens every day.
Banks, telecommunications companies, mobile-money providers, online retailers, cloud-service providers and software companies all handle data or provide services that can be affected by cyber threats.
UCC’s call for public trust therefore places responsibility on private-sector technology providers as well as government agencies.
Maurice Taremwa, president of the ISACA Kampala Chapter, cautioned cybersecurity professionals against developing technical policies that distance ordinary users from the systems they are expected to use.
The focus, he argued, should be on whether everyday consumers actually feel protected when interacting with digital services.
This means security measures must be designed with usability in mind.
Complex security procedures that users do not understand or cannot follow effectively may undermine rather than strengthen protection.
Cybersecurity requires skilled people
Technology alone cannot guarantee digital security.
UCC and industry representatives have also highlighted the importance of investing in skilled cybersecurity professionals who can identify vulnerabilities, respond to incidents and maintain digital systems.
As technology becomes more sophisticated, organisations need personnel capable of understanding both established security risks and emerging threats.
This includes expertise in areas such as network security, data protection, cloud computing, artificial intelligence and incident response.
The demand for such skills is likely to grow as Uganda’s digital economy expands.
Universities, technology hubs and private-sector training programmes can therefore play an important role in developing the workforce required to support the country’s digital transformation.
Busitema opens new digital innovation hub
Uganda’s push to expand technology skills is also being reflected in new innovation infrastructure.
On September 15, Busitema University opened an MTN Spark Hub, providing students and members of the surrounding community with access to digital tools, internet connectivity, training and mentorship.
The initiative was launched through a partnership involving the Ministry of ICT and National Guidance, MTN Uganda Foundation, MTN Uganda, Centenary Technology Services, AniScholar, UCC and Busitema University.
The Ministry of ICT said the hub is intended to help young people develop digital skills and turn ideas into practical solutions.
The initiative is particularly relevant to Uganda’s technology ambitions because the country has a young population and growing demand for digital skills.
The ministry has noted that about 75 per cent of Uganda’s population is below the age of 30, creating both a large potential technology workforce and a significant population of digital-service users.
From access to meaningful digital participation
Expanding internet connectivity is only one part of digital transformation.
Citizens also need the skills, confidence and security protections necessary to use digital services effectively.
This is where the concepts of digital literacy and digital trust become important.
A person may have access to a smartphone and an internet connection but still be vulnerable to fraud, misinformation, phishing or identity theft if they do not understand basic digital-security practices.
Similarly, a business may have access to digital payment systems but face serious disruption if it lacks adequate cybersecurity measures.
Technology policy therefore increasingly needs to address access, skills, security and trust together.
Protecting personal data
The growth of digital services also increases the importance of protecting personal information.
Users routinely provide names, telephone numbers, identification details, financial information and other personal data when accessing online platforms.
Poor security practices can expose such information to unauthorised access.
Uganda has established the Personal Data Protection Office as part of its broader data-protection framework, while cybersecurity and information-security measures are being developed across government and the private sector.
For technology companies, public trust is closely connected to how responsibly they collect, store, process and protect personal information.
Clear privacy policies and effective security controls can help users understand how their information is handled.
Technology and access to justice
The role of technology is also expanding into Uganda’s legal and justice sectors.
At the second annual Uganda Law Society Digital Transformation Festival held in Kampala on September 17 and 18, Attorney General Sam Mayanja called for responsible adoption of technology in the justice system.
The festival was held under the theme “Digital Democracy: Advancing Access to Justice, Innovation, and Ethical Governance through Technology.”
Mayanja said digital transformation should expand access to justice while protecting professional ethics, confidentiality, cybersecurity and the rule of law.
The justice sector illustrates how technology’s benefits and risks increasingly exist side by side.
Digital platforms can improve access to information and services, but legal institutions must also protect confidential information and ensure that technological systems comply with professional and legal standards.
The economic importance of cybersecurity
Cybersecurity is increasingly connected to Uganda’s wider economic ambitions.
Businesses depend on digital systems for payments, communication, logistics, customer management and record keeping.
A prolonged cyber incident could interrupt business operations, undermine customer confidence and create financial losses.
For larger companies, security breaches can also damage relationships with customers and business partners.
For smaller businesses, the effects can be particularly significant because many may have limited resources for cybersecurity and recovery.
This makes awareness, affordable security tools and accessible expertise important components of Uganda’s digital-economy strategy.
Building resilience rather than simply preventing attacks
No digital system can be assumed to be completely immune from cyber threats.
The emphasis on resilience therefore represents an important part of the current cybersecurity debate.
Organisations need to prepare for the possibility that an attack may succeed despite preventive measures.
That means establishing systems for detecting unusual activity, responding rapidly, isolating affected systems, communicating with users and restoring normal operations.
Such preparations can reduce the potential damage caused by security incidents.
They can also strengthen public confidence by demonstrating that an organisation has a clear plan for dealing with disruptions.
What public trust means for technology companies
For technology companies, UCC’s message creates a broader definition of cybersecurity responsibility.
Security cannot be treated solely as an internal technical function.
Companies also need to consider how customers experience security, how quickly incidents are communicated and whether users can obtain assistance when something goes wrong.
Transparent communication can be particularly important after a security incident.
Users need reliable information about what happened, what information may have been affected and what steps they should take.
Failing to communicate effectively can deepen uncertainty even when technical teams are working to resolve the problem.
Uganda’s next phase of digital transformation
Uganda’s technology sector is entering a phase in which digital adoption is increasingly accompanied by discussions about governance, security and responsible innovation.
The development of an AI strategy, the validation of the country’s AI readiness assessment, the updated National Information Security Framework and investment in digital innovation hubs are all part of that broader transition.
The challenge will be ensuring that technological expansion does not outpace the country’s ability to protect users and maintain confidence in digital services.
That will require cooperation between government regulators, technology companies, universities, cybersecurity professionals and consumers.
Conclusion
Uganda’s digital economy is expanding rapidly, but the country’s technology regulators say growth must be accompanied by stronger cybersecurity and public confidence.
UCC’s latest call for technology companies to place public trust at the centre of cybersecurity reflects the growing dependence of citizens and businesses on digital platforms.
The challenge extends beyond protecting computer networks. It includes safeguarding personal information, responding effectively to cyber incidents, developing skilled professionals and ensuring that emerging technologies such as artificial intelligence are adopted responsibly.
Government initiatives, including the updated National Information Security Framework and work on an AI and Emerging Technologies Strategy, show that Uganda is developing policies to address these challenges.
At the same time, initiatives such as the MTN Spark Hub at Busitema University demonstrate the importance of developing the skills needed to participate in an increasingly digital economy.
Ultimately, the sustainability of Uganda’s digital transformation will depend not only on how many people can access technology, but also on whether they can use it safely, confidently and responsibly.
**Source
