Milima Cyber Academy unveils crisis-based Cyber Leadership Course in Kampala

Kampala, Uganda: Milima Cyber Academy (MCA), Uganda’s leading cybersecurity and digital forensics institution, has launched a first-of-its-kind Executive Cybersecurity Management Training Program.

Instituted in partnership with the European Cyber Security Initiative (ECSI) and the Estonian Centre for International Development (ESTDEV), this strategic initiative is designed to equip Uganda’s senior leaders, in government, finance, telecoms, energy, and other critical sectors, with advanced cyber readiness skills necessary to secure the country’s critical information infrastructure against rising digital threats.

Uganda, like many African countries, is undergoing a digital revolution. Government services are moving online, financial transactions are increasingly digitized, and essential infrastructure, from energy grids to health systems, is reliant on interconnected digital platforms. While this transformation offers great promise, it also presents new vulnerabilities.

According to the Uganda Police Force’s Annual Crime Report, financial losses due to cybercrime rose from UGX 19.2 billion in 2022 to an alarming UGX 72 billion in 2024. This dramatic increase underscores not just the growing sophistication of cybercriminals, but also the systemic weaknesses in cyber defences across multiple sectors.

According to experts, it’s not just a lack of technology, but a lack of cyber-aware leadership. Too many decisions around ICT infrastructure, digital transformation, and risk management are being made without a foundational understanding of cyber threats at the leadership level. This program aims to change that decisively.

Strategic Partners with a Shared Vision

With financial and technical support from ESTDEV, and the European Cyber Security Initiative (ECSI) as co-delivery partner, Milima Cyber Academy is taking the lead in launching an executive training program that goes beyond theory. The target group includes over 60 senior executives from more than 30 institutions, spanning government ministries, central and commercial banks, telecommunications firms, energy providers, revenue and taxation agencies, and other entities that constitute Uganda’s critical digital infrastructure.

Speaking at the official program launch held in Kampala, Uganda, Emmanuel Chagara, CEO of Milima Cyber Academy, highlighted the leadership gap in Uganda’s cybersecurity space and the dangerous implications of inaction.

“Uganda’s critical information infrastructure remains a growing concern. Despite progress in policy frameworks and awareness campaigns, many institutions still operate without robust, well-coordinated cybersecurity controls. This leadership vacuum exposes our national systems to operational failure, massive financial losses, and long-term reputational damage,” Chagara said.

Chagara noted that while ICT departments are often equipped with basic technical know-how, boards and executive teams frequently lack the knowledge to assess risks, allocate budgets for cybersecurity, or make informed governance decisions.

Global Expertise Tailored to Local Needs

Markus Münzer, Project Lead for the European Cyber Security Initiative (ECSI), offered a global perspective on the urgency of strengthening cyber leadership.

He said, “Uganda, like many nations globally, is facing a surge in cyber threats that target essential sectors, from banking systems to hospital networks, government databases, and power grids. While commendable efforts have been made in establishing regulations, Uganda’s cybersecurity maturity is still at a formative stage,” Münzer explained.

He pointed out that many Ugandan institutions lack core cybersecurity structures such as incident response plans, governance policies, cyber risk assessments, or business continuity strategies, which leaves them vulnerable not only to attacks but also to the inability to recover or respond effectively when breaches occur.

“This challenge is not unique to Uganda. Even in Europe, we have struggled with these same issues. However, through sustained investment in executive training, cross-sector collaboration, and leadership-driven cybersecurity policy, we’ve made measurable progress,” Münzer added.

The Executive Cybersecurity Management Training Program, scheduled to begin in August 2025 at Mestil Hotel, Kampala, is anything but a conventional workshop. Designed to mirror real-world crisis scenarios, the program will feature hands-on, high-pressure simulations using ECSI’s proprietary STRATEX platform, a strategic cyber incident response simulator used across European Union institutions.

These simulations will immerse participants in executive decision-making roles during simulated ransomware attacks, data breaches, and infrastructure sabotage incidents. The aim is to sharpen crisis communication, strengthen inter-agency coordination, and teach executives how to lead effectively under cyber duress.

Additional modules will cover cybersecurity governance frameworks for institutions, legal and regulatory obligations under Uganda’s Computer Misuse Act and Data Protection Laws, strategic budgeting for cybersecurity, supply chain vulnerabilities, cyber insurance and risk transfer strategies, stakeholder engagement and communication during cyber crises

The Estonian Centre for International Development (ESTDEV), known for its work in supporting e-governance and cybersecurity capacity building across emerging markets, is funding and technically backing the program.

Estonia, one of the most digitally advanced nations globally, experienced a massive cyberattack in 2007 that reshaped its national cybersecurity strategy. Since then, it has emerged as a global leader in cyber resilience, offering technical expertise, policy frameworks, and training models that are now being adapted for Uganda’s context.

This initiative is not a one-off event, but rather the beginning of a long-term national movement to embed cybersecurity leadership across Uganda’s public and private sectors.