isaca cyber crime in uganda

7/14/2019 ISACA cyber Crime in Uganda

http://slidepdf.com/reader/full/isaca-cyber-crime-in-uganda 1/28

Cybercrime in Uganda are you prepared?

The extent of the problem, and way forward

Forensic. Advisory. Fraud.www.summitcl.com

Mustapha B. Mugisa, CFE, CHFI, CISA, MBA

Founder & CEO, Summit Consulting Ltd.

ISACA event

26 June 2013,

Hotel Africana, Kampala.



Forensic. Advisory. Fraud

How much do youestimate is the

risk of cyber crime to Ugandatoday?

I m

a g e c r e d i t ,

A C

F E . c o m

Perspective




Why care?

“Cybercrime and espionageare the top two challenges

to USA national securitytoday and in the future”,

President Barak Obama, March 2013.

What does this meanto Uganda?

Perspective …



Forensic. Advisory. Fraud I m

a g e c r e d i t ,

A C

F E . c o m

If yoursecurity

wasbreached, doyou have the

tools andexpertise toproof it?

Are you safe online..

Photo credit: UNCTAD photo



Let’s talk cybercrime cases are sensitive…


Are you getting value for money from your pen tests?




Why care?

Cyber crime vectors

• Computer related offenses

•

Content related offenses• Copyright related offenses

• Attack on security (CIA) is denial




Why care?

The problem is huge for Africa, and Uganda.Not even mechanisms exists to quantify it!

Internetphoto.




Why care?

Lots of attack vectors; Ugandans highlyexposed…

http://qz

.com/16

717/chin

ese-

cyber-

criminals

-caught-

launderi

ng-48-

mln-

through-

online-

games/

http://qz.com/16717/chinese-cyber-criminals-caught-laundering-48-mln-through-online-games/







































Why care?

The URA hacking case is still fresh…

http://w

ww.obse

rver.ug/i

ndex.php

?option=

com_content&vie

w=article

&id=245

89:-

uganda-

revenue-authority

-hackers-

jailed-12-

years

http://www.observer.ug/index.php?option=com_content&view=article&id=24589:-uganda-revenue-authority-hackers-jailed-12-years











































Why care?Cyber attack on Uganda

… Non-official websites cometop on the search of theword “museveni”. How canNITA let this be!!!!




Why care?Unacceptable content…




Why care?

1.Spam2.Viruses, including key loggers

– common attack3.Hacking; m-i-m attacks4.Intellectual property theft5.Phishing & identity theft6.Denial of service – most

common7.Data harvesting.

Cyber attacks in many ways…




Why care?

1. Over 20 cases involving computer andmobile phones reported weekly toUganda Police CID department:

• Cases of anonymous email

investigations; Facebookidentify theft, Bank fraud;

Hacking into computerSystems esp on-line banking;and intellectual property theft





Why care?

• All crimes reported at Police nowinvolve use of computers or mobilephones

• Recent cases involve cyber stalking;cyber harassment and fraud




Recommendedsolutions…


Are you getting value for money from your pen tests?




“Uganda Cyber Laws” are three currently:

1. Computer Misuse Act,2011

2. Electronic Transactions

Act, 20113. Electronic Signatures

Act, 2011

I m

a g e c r e d i t ,

A C F E . c o m

Laws are in place, can you usethem?

All lawscommencedin April 2011.

http://images.google.co.in/imgres?imgurl=http://tech.co.in/wp-content/uploads/2007/05/court-judge-law-gavel-bg.jpg&imgrefurl=http://www.tech.co.in/&h=160&w=200&sz=7&hl=en&start=10&um=1&tbnid=yOg2zSY_X1mEQM:&tbnh=83&tbnw=104&prev=/images?q=google+images+on+cyber+laws&svnum=10&um=1&hl=en&cr=countryIN&sa=N

























“Unauthorized access to private computersand network systems, deliberate corruptionor destruction of other people’s data,

disrupting the network or systems,introduction of viruses or disrupting thework of others; the creation andforwarding of defamatory material,

infringement of copyright, as well as thetransmission of classified data or othermaterial to outside organizations… etc…any crime involving a computer.”

I m

a g e c r e d i t ,

A C F E . c o m

E.g. computer misuse long tittle




Total ICT security…

#2. Empowering you to be secure!

• 96% of Government staff are not ITtrained.

•

Only 4% of are IT security professionals• Where is your weakest link?

For 96% of staff --- they mustbecome Certified SecureComputer User (CSCU).




Total ICT security…

#2. Empowering you to be secure!

For your 4% of staff --- they mustattain Certified Ethical Hacker

(CEH); Computer Hacking ForensicInvestigator (CHFI); CertifiedFraud Examiner (CFE) andLicensed Pen Tester (LPT).

www.eccouncil.org




Our solution to you…

#3. Partner with our forensic lab

Don’t be held by staff at ransom!

Know the smallest thing that was the source

of the problem… who, what, when, where andhow & why – and let us take care of all thelegal issues involved. That is the objective of

a forensic investigation



#3.1 Cyber crime investigations

Credit CardFraud Tracking

InsuranceClaims

Investigations

Global AssetTracing

Banking FraudsInvestigations

Cyber CrimeInvestigations

Global DebtRecovery

Investigations

OrganizedFinancial CrimeInvestigations

LitigationSupport

Financial DataTheft




#3.2 Online Brand Protection & Reputation Management

• Defaming Social Networking postsremoval

• Defaming Blog Postings Removal

• Defaming Articles Removal

• Defaming website Removal

Blogs/ForumsRemoval

• Tracing suspected websites, blogs,forums abusers

• Getting information of people behindwebsites, blogs, forums

• Removal Actions for such websites

OnlineCounterfeit/FakeProducts Tracking

• Reduction in rankings of defaming content bypositive SEO

• Reduction in rankings of defaming content byproprietary methods

• Increasing Positive content with right SEOtechniques

Reducing Visibilityof Defaming

Content



#3.3 Total reactive solution

Cyber Solutions to

government

Data

LeakagePrevention

Cyber CrimeInvestigations

Smartphone,Laptops

Security

CyberReputation

Management



#3.4 Total security solution

RegulatoryIntelligence

Cyberweaponry &

defense

Political

Intelligenceand cyber

surveillance

CIRT systemset up

We can set up alab to create, useand managecyber weaponryfor uplifting

Uganda’snational security.




Ensure effective investigations

Digital forensic solutions–investigations:

Anything digital, we’ve thesolutions.

Specialized Training in

fraud, IT security andforensic & risk management




Next steps…

You should

1. Sponsor staff for training in ethical hacking,digital forensics and CSCU

2. Require all staff using computers to be CSCU, toavoid data leakage and ensure accountability3. Set a forensic services fund – and we train all

law enforcement as a PPPs – something's arebetter centralized

4. Coopt private sector players to advise on keyimplementations e.g. CIRT, CWDS (cyberweaponry & defense system) etc…




Next steps…

SCL productivity solutions

• Unified secure messaging system

• ERP• Incident reporting and

whistleblowing system•

E-Learning platform for in-housetraining

Call us today




Q&A

We take pride indoing the right

thing, ratherthan what isright for theprofitability of SCL.

Thank you!

isaca cyber crime in uganda

Documents