2024-12-01
The Bank of Uganda issued these 2024 Guidelines to establish minimum standards for supervised financial institutions managing cyber and technology risks. The framework mandates robust governance structures, regular independent assessments, secure outsourcing and cloud practices, and comprehensive incident response protocols. It requires institutions to implement proportionate risk mitigation measures tailored to their size, transaction volume, and systemic role while maintaining strict compliance with existing Ugandan financial legislation.