Kampala, 27th October 2026

The National Information Technology Authority - Uganda (NITA-U) has handed over certification for the ISO/IEC 27001:2022 Information Security Management System (ISMS) to the Financial Intelligence Authority (FIA), marking a major milestone in strengthening information security, cybersecurity resilience and digital governance within the authority.

FIA is one of the selected Ministries, Departments and Agencies (MDAs) under the World Bank-funded ISMS Implementation Project, implemented by NITA-U through its Directorate of Information Security, under the Uganda Digital Acceleration Project (UDAP-GovNet). The project supports government institutions to put in place internationally recognised controls for managing information risks and protecting their systems and data.

ISO/IEC 27001:2022 is the international standard for information security management. It sets out how an organisation identifies information risks, puts the right controls in place and keeps improving its security over time. For FIA, which receives and analyses highly sensitive financial information to fight money laundering and terrorism financing, the system strengthens the confidentiality, integrity and availability of its information and systems.

Speaking at the handover, the Minister of Finance, Planning and Economic Development, Hon. Henry Musasizi, said that protecting financial information is vital to the stability of Uganda’s economy.

“Uganda’s financial system depends on institutions that are secure and trusted. Protecting financial intelligence is central to our fight against money laundering, terrorism financing and other financial crimes, and to maintaining confidence in our economy. I commend FIA and NITA-U for this achievement and encourage other government institutions to follow their lead,” he said.

The Minister added that Government will continue to prioritise investment in secure digital systems across the public sector, as more financial services and records move online.

Speaking on behalf of the Executive Director of NITA-U, Dr. Hatwib Mugasa, Johnson Tumusiime Ag. Director Information Security, NITA-U congratulated FIA on the milestone and described it as an example for other institutions across Government.

“Every institution that adopts a strong information security management system makes the whole of Government safer. FIA handles some of the most sensitive information in the country, and this milestone shows what is possible when institutions make information security a priority. NITA-U will continue to support MDAs to build the systems, skills and culture needed to protect government data,” he said.

He further noted that NITA-U will continue working closely with FIA and other participating MDAs to monitor implementation and strengthen their readiness to respond to cyber threats.

The Executive Director of the Financial Intelligence Authority, Mr. Samuel Were Wandera, welcomed the handover, noting that the trust of FIA’s partners depends on how well the Authority protects the information it holds.

“Trust is at the heart of our work. Reporting entities, our partners and the public must be confident that the information entrusted to FIA is protected at all times. This system gives us a clear, internationally recognised framework to manage information risks and respond to evolving cyber threats. We thank NITA-U and the World Bank for their support,” he said.

He also committed FIA to maintaining the system and building an information security culture among its staff, so that the standards achieved are sustained beyond the project.

The handover reflects Government’s wider commitment to securing digital public services as more services move online. NITA-U will continue to roll out the ISMS Implementation Project across the other selected MDAs.

END