G/TBT/N/UGA/1321  
27 April 2021  
(21-3581) Page: 1/2 
Committee on Technical Barriers to Trade  Original:  English  
 
  
NOTIFICATION  
The following notification is being circulated in accordance with Article 10.6  
 
1. Notifying Member:  UGANDA   
If applicable, name of local government involved (Article 3.2 and 7.2):   
2. Agency responsible:   
Uganda National Bureau of Standards  
Plot 2 -12 ByPass Link, Bweyogerere Industrial and Business Park  
P.O. Box 6329  
Kampala, Uganda  
Tel: +(256) 4 1733 3250/1/2  
Fax: +(256) 4 1428 6123  
E-mail: info@unbs.go.ug  
Website: https://www.unbs.go.ug  
Name and address (including telephone and fax numbers , email and website 
addresses, if available) of agency or authority designated to handle comments 
regarding the notification shall be indicated if dif ferent from above:   
3. Notified under Article 2.9.2 [X], 2.10.1 [   ], 5.6.2 [   ], 5.7.1 [   ], other :  
4. Products covered (HS or CCCN where applicable, otherwise national tariff 
heading. ICS numbers may be provided in addition, where applicable):  
Information and Communication Technology Hardware and Software; - Other apparatus 
for transmission or reception of voice, images or other data, including apparatus for 
communication in a wired or wireless network (such as a local or wide area network): 
(HS 85176); Information technology (IT) in general (ICS 35.020)  
5. Title, number of pages and language(s) of the notified document:  DUS 2209:2019, 
Information Security — Risk Assessment, First Edition (38 page(s), in English)  
6. Description of content:  This Draft Uganda Standard specifies the requirements that 
public and private sector organisations that own and/or operate CII shall adhere to in 
order to identify, quantify or qualitatively describe and prioritise risks against risk 
evaluation cr iteria and objectives relevant to them. It addresses risks to the 
confidentiality, integrity and availability of information that CII hold, store and process.  
7. Objective and rationale, including the nature of urgent problems where 
applicable:  National s ecurity requirements; Prevention of deceptive practices and 
consumer protection; Protection of human health or safety  
8. Relevant documents:   
1. Uganda (1964), The Official Secrets Act, The Government of Uganda, Entebbe, 
Uganda.  
2. Uganda (1987), The Security Organisations Act, 2005, The Government of 
Uganda, Entebbe, Uganda.  G/TBT/N/UGA/1321  
 
- 2 - 
 
  3. Uganda (2005a), "The Access to Information Act, 2005", in The Uganda Gazette, 
The Government of Uganda, Entebbe, Uganda.  
4. Uganda (2005b), The Uganda People's Defence Forces Act, 20 05, The 
Government of Uganda, Entebbe, Uganda.  
5.  Uganda (2006), The Police (Amendment) Act, 2006, The Government of Uganda, 
Entebbe, Uganda.  
6. Uganda (2009a), "The National Information Technology Authority, Uganda Act, 
2009", in The Uganda Gazette, The Govern ment of Uganda, Entebbe, Uganda.  
7. Uganda (2009b), The National Security Council Act, The Government of Uganda, 
Entebbe, Uganda.  
8. Uganda (2010), "The Regulation of Interception of Communications Act, 2010", 
in The Uganda Gazette, The Government of Uganda, Ent ebbe, Uganda.  
9. Uganda (2011a), "The Computer Misuse Act, 2011", in The Uganda Gazette, The 
Government of Uganda, Entebbe, Uganda.  
10. Uganda (2011b), "The Electronic Signatures Act, 2011", in The Uganda Gazette, 
The Government of Uganda, Entebbe, Uganda  
11. Uganda (2011c), "The Electronic Transactions Act, 2011", in The Uganda Gazette, 
The Government of Uganda, Entebbe, Uganda  
12. DUS 2175, 2019 Information Security — Requirements for Security Controls  
13. US ISO/IEC 27000, Information technology — Security technique s — Information 
security management systems — Overview and vocabulary  
14. US ISO/IEC 27005, Information Technology — Security Techniques — Information 
Security Risk Management  
15. US IEC 31010, Risk Management – Risk Assessment Techniques  
16. ISO Guide 73, Risk Manage ment — Vocabulary   
17. US ISO/IEC 27001, Information Technology — Security Techniques — Information 
Security Management Systems — Requirements (2nd Edition)  
9. Proposed date of adoption:  June 2021  
Proposed date of entry into force:  Upon declaration as mandatory by the Minister for 
Trade, Industry and Cooperatives  
10. Final date for comments:  60 days from notification  
11. Texts available from:  National enquiry point [X] or address, telephone and fax 
numbers and email and website addresses, if available , of other body:   
Uganda National Bureau of Standards  
Plot 2 -12 ByPass Link, Bweyogerere Industrial and Business Park  
P.O. Box 6329  
Kampala, Uganda  
Tel: +(256) 4 1733 3250/1/2  
Fax: +(256) 4 1428 6123  
E-mail: info@unbs.go.ug  
Website: https://www.unbs.go.ug  
https://members.wto.org/crnattachments/2021/TBT/UGA/21_3019_00_e.pdf