Duty LXD-7357
Provides telecom services, in Uganda
Uganda Communications (Computer Emergency Response Team) Regulations, 2019, Operator Incident Notification and Reportingin force3 lines
Uganda Communications (Computer Emergency Response Team) Regulations, 2019 (S.I. No. 81 of 2019), reg. 9(1)(e) and (f) · Read the law's page
- This binds an operator, meaning a person licensed to provide communication or communications services in Uganda (reached by declaring that you provide telecommunications services).
- Notify the Uganda Communications Commission of any significant information or computer security threat or incident that comes to your attention during your ordinary course of business (regulation 9(1)(e)).
- Provide the Commission with quarterly cyber security incident reports, information technology and systems risk assessment reports and any other information the Commission requests (regulation 9(1)(f)).
Uganda Communications (Computer Emergency Response Team) Regulations, 2019, Operator Cyber Security Obligationsin force6 lines
Uganda Communications (Computer Emergency Response Team) Regulations, 2019 (S.I. No. 81 of 2019), regs. 9(1)(a) to (d), 9(1)(i) and 10(1) · Read the law's page
- This binds an operator, meaning a person licensed to provide communication or communications services in Uganda (reached by declaring that you provide telecommunications services).
- Maintain a secure environment for the transmission of voice and data communications at all times (regulation 9(1)(a)).
- Establish and implement a cyber-security policy for information and communications systems that the Commission approves (regulation 9(1)(b)).
- Implement the guidelines issued by the Computer Emergency Response Team within the Commission (regulation 9(1)(d)).
- Maintain reliable and up to date mechanisms to filter malicious traffic from incoming or outgoing traffic (regulation 9(1)(i)).
- Keep for at least six months a record of any action taken under regulation 9, and of user logs, traffic and routing data pertaining to any threat or malicious traffic (regulation 10(1)).