Cybersecurity: Building trust in Uganda’s digital economy

My experience across information and cybersecurity, technology risk and IT audit has reinforced my view that digital trust is both a business priority and a governance responsibility.

Earlier in my career, leading IT audits and technology assurance assignments, I got a strong appreciation of the link between effective oversight, sound risk management and secure, reliable digital services.

The focus was not simply on identifying weaknesses, but on understanding whether technology was working as intended, whether vulnerabilities could affect the business, and ensuring that  technology risks including cybersecurity  received the right level of attention and action.

As a CISO, I see cybersecurity as fundamental to creating and sustaining digital trust. As we introduce AI, cloud, APIs and increasingly interconnected digital services, our responsibility is not simply to secure the technology at launch, but to ensure it remains secure, resilient and worthy of our customers' trust throughout its lifecycle.

This requires continuous visibility of threats and vulnerabilities, clear ownership of cyber risk, and decisive action when weaknesses are identified.

Protecting digital services involves preparing for disruption as well as preventing it and organisations must understand the risks they face, build resilience into their systems and establish plans to restore services when incidents occur.

In financial services, where customers and businesses depend on reliable transactions, resilience is fundamental to maintaining confidence.

These lessons inform how financial institutions should approach digital advancement today. Solutions such as dfcu Bank’s Mobi Loans for SMEs and personal banking demonstrate how digital channels can make financial services more accessible and convenient.

For entrepreneurs, access to financial services through digital platforms can help address practical business needs.

Yet the value of convenience depends on the confidence customers have in the systems delivering it. Innovation must therefore be accompanied by strong safeguards, responsible data management, resilient systems and clear communication. Financial institutions need to assess emerging risks, protect sensitive information, strengthen access controls and prepare to respond effectively when incidents occur.

Security should be considered from the beginning of a product’s development, rather than introduced only after a service has been launched or a threat has emerged. Convenience should never come at the expense of security and information confidence.

The responsibility extends beyond individual institutions: cybercriminals do not operate within the boundaries of a single organisation or sector. A fraudulent transaction may involve social engineering, telecommunications channels, digital payment systems and compromised personal information.

Addressing these threats requires banks, telecommunications companies, fintechs, regulators, law enforcement agencies and government institutions to work together.

INTERPOL’s findings reinforce the importance of cross-sector and cross-border cooperation as criminal activity becomes more sophisticated.

Responsible information-sharing, coordinated incident response and stronger public awareness can help institutions identify emerging threats earlier and reduce the harm caused by fraud.

Collaboration must also respect privacy, protect customer information and maintain accountability.

People remain central to cybersecurity. Even the strongest systems can be undermined when individuals are manipulated into revealing confidential information or using the authorised access they are given to approve transactions they do not fully understand.

Criminals increasingly exploit urgency, fear and the promise of quick financial returns. Artificial intelligence can make fraudulent messages, voices, images and videos more convincing, making it harder for people to rely on appearances alone when deciding whether something is genuine.

This makes continuous awareness and practical education essential. Employees need the knowledge and confidence to recognise suspicious requests and escalate concerns.

Customers need straightforward guidance on protecting personal information, verifying unusual instructions and reporting suspected fraud. Businesses should establish clear procedures for authorising payments and confirming changes to supplier or beneficiary details.

Under this year’s Global Cybersecurity Awareness Month theme, “Don’t Make it Easy for Them,” these five simple habits can make a meaningful difference: A - Pause before clicking unfamiliar links. B - Verify unexpected requests through a trusted, independent channel. C - Protect passwords and authentication details. D - Never disclose confidential banking information in response to unsolicited messages or calls. E - Be cautious of investment opportunities promising unusually high returns, and report suspected fraud promptly.

These actions cannot eliminate every risk, but they can make it harder for criminals to exploit everyday digital interactions. For organisations, the same principle requires a culture in which security is everyone’s responsibility. Staff should feel able to question unusual instructions without fear of being perceived as obstructive.

Customers should have accessible channels through which to raise concerns. Leaders should treat cybersecurity investment, staff training, continuous assurance and incident preparedness as part of protecting the institution’s ability to serve its customers.

Ultimately, cybersecurity is not merely a technology function; it is a business and economic priority. Uganda’s digital future will depend on institutions that combine innovation with accountability, resilience and customer care.

As financial services become increasingly connected, trust will be one of the most important factors determining whether digital transformation delivers lasting value.

At dfcu Bank, we believe that building a trusted digital economy requires a shared commitment from institutions, businesses, government and individuals. By embedding security into innovation, strengthening oversight, investing in people and building effective partnerships, we can help ensure that digital progress translates into sustainable opportunity for Ugandans.

The objective is not simply to protect systems from attacks. It is to give people the confidence to participate, businesses the assurance to grow and the economy a stronger foundation for the future.

The writer is the Chief Information Security Officer, dfcu Bank