UgandaUganda Communications (Computer Emergency Response Team) Regulations, 2019, Operator Cyber Security Obligations
In force.
A sector security regimes rule binding private bodies.
- Private right of action
- No
- Enforcement body
- The Uganda Communications Commission, which approves an operator's cyber-security policy.
- Instrument type
- a regulation made under an act
- Obligation class
- Security, Governance
What it requires
- This binds an operator, meaning a person licensed to provide communication or communications services in Uganda (reached by declaring that you provide telecommunications services).
- Maintain a secure environment for the transmission of voice and data communications at all times (regulation 9(1)(a)).
- Establish and implement a cyber-security policy for information and communications systems that the Commission approves (regulation 9(1)(b)).
- Implement the guidelines issued by the Computer Emergency Response Team within the Commission (regulation 9(1)(d)).
- Maintain reliable and up to date mechanisms to filter malicious traffic from incoming or outgoing traffic (regulation 9(1)(i)).
- Keep for at least six months a record of any action taken under regulation 9, and of user logs, traffic and routing data pertaining to any threat or malicious traffic (regulation 10(1)).
These lines are LexLint's reading of the law's text.
What this law does
Regulation 9(1)(a) requires an operator to maintain a secure environment for the transmission of voice and data communications at all times. Regulation 9(1)(b) requires an operator to establish and implement a cyber-security policy for information and communications systems approved by the Commission. Regulation 9(1)(d) requires an operator to implement guidelines issued by the CERT.
Regulation 9(1)(i) requires an operator to establish reliable and up to date mechanisms to filter malicious traffic from incoming or outgoing traffic. Regulation 10(1) requires an operator to keep for at least six months a record of any action taken under regulation 9, and of user logs, traffic and routing data pertaining to any threat or malicious traffic.
When LexLint raises it
When your app profile says your app provides telecom services.
Back to the example · Lint your app
Page updated .