ISACA Kampala Chapter

ISACA Kampala Chapter Welcome to the ISACA Kampala Chapter

Our Vision: "Trust in, and Value from Information systems"

ISACA ( Information Systems Audit and Controls Association) is a world wide association of IS governance professionals. The association currently focuses on assurance, security, and governance and provides globally recognised certification in assurance (Certified Information Systems Auditor"CISA"), security (Certified Information Security Manager "CISM"), and governance (Certified in the Governance of Enterprise IT "CGEIT"). The association is one of individual members, often the sole practitioner of information systems auditing, security, and/or governance in his or her company. The membership of the ISACA reflects a multiplicity of backgrounds and skills that make the information systems governance field challenging and dynamic

🧠 Trivia time!If an AI agent can investigate, decide, and respond to cyber incidents, what should it really be treated a...
13/10/2026

🧠 Trivia time!

If an AI agent can investigate, decide, and respond to cyber incidents, what should it really be treated as?

Drop your answer — A, B, C, or D — in the comments. 👇

AI is changing the Security Operations Centre from a place that only watches and alerts into an environment that can ana...
12/10/2026

AI is changing the Security Operations Centre from a place that only watches and alerts into an environment that can analyze, prioritize, recommend, and sometimes act.

That shift is powerful.

But it also creates a new governance question:

When AI begins making cyber decisions, who is accountable for the outcome?

✅ Detection is no longer enough.

Modern security teams do not just need more alerts. They need better context, cleaner telemetry, stronger correlation, and faster understanding of what actually matters.

✅ Prioritization becomes a trust issue.

If AI decides which threats matter most, the organization must understand how that decision is made. A missed critical incident or a wrongly escalated low-risk event can affect response, resources, and confidence.

✅ Recommendations must be explainable.

When AI recommends that a user account be blocked, a system isolated, or an incident escalated, the security team must be able to trace the evidence behind that recommendation.

✅ Action requires guardrails.

The moment AI moves from advising to acting, the risk changes. Automated response can reduce damage, but it can also disrupt business operations if the wrong action is taken.

✅ Human oversight still matters.

AI can support investigation, reduce repetitive work, and help teams respond faster. But accountability cannot be outsourced to the tool. The organization must still define who approves, who reviews, who owns the risk, and who answers when something goes wrong.

✅ The mature SOC will not be fully human or fully automated.

It will be a governed partnership between people, process, technology, and intelligent systems — where AI handles speed and scale, while humans provide judgement, accountability, and context.

The real question is not whether AI belongs in the SOC.

The real question is whether organizations are ready to govern AI inside the SOC.

This conversation builds on one of the powerful sessions at , where Steven Mwesige, CISO at Pearl Bank, challenged participants to think deeply about what happens “When the SOC Thinks for Itself.”

AI can accelerate cyber defense. But digital trust still depends on governance, accountability, and human judgement.

Congratulations, Brian Mwine Rutebemberwa.ISACA Kampala Chapter congratulates Brian Mwine Rutebemberwa on his appointmen...
10/10/2026

Congratulations, Brian Mwine Rutebemberwa.

ISACA Kampala Chapter congratulates Brian Mwine Rutebemberwa on his appointment as Chief Information Security Officer at NCBA Bank Uganda.

With over 20 years of experience across technology, cybersecurity, banking, financial services, telecommunications, and enterprise environments, Brian brings deep expertise in IT strategy, cybersecurity, cloud architecture, digital transformation, and regulatory compliance.

His leadership, professional certifications, and continued contribution to the cybersecurity community reflect the kind of excellence that strengthens the profession and advances digital trust in Uganda.

We celebrate this important milestone and wish Brian continued success in his new role.

Congratulations, Brian.

09/10/2026

Happy Independence Day, Uganda

Today, we celebrate the courage, resilience, unity, and hope that continue to define our nation.

As Uganda marks 64 years of independence, may we continue to build a future shaped by progress, opportunity, innovation, and shared responsibility.

From all of us at ISACA Kampala, we wish you a joyful and meaningful Independence Day.

Happy 64th Independence Day, Uganda.

After an insightful week at , let’s see how much stayed with you.Test your knowledge, drop your answer in the comments,...
07/10/2026

After an insightful week at , let’s see how much stayed with you.

Test your knowledge, drop your answer in the comments, and keep the learning going. 👇

Digital trust is not just a conference theme. It is the future of how we govern, secure, audit, protect, and lead digital systems.

Your next professional growth opportunity is still on the calendar.As we continue through the second half of 2026, ISACA...
06/10/2026

Your next professional growth opportunity is still on the calendar.

As we continue through the second half of 2026, ISACA Kampala Chapter invites members, professionals, and organisations to take advantage of the remaining training programmes designed to strengthen capability in audit, governance, risk, privacy, cybersecurity, and digital trust.

Upcoming trainings include:

✅ CDPSE Certification Bootcamp
✅ CISA & CISM Certification Review Classes
✅ CGEIT Certification Bootcamp
✅ CRISC Certification Bootcamp
✅ COBIT Foundation Training Workshop

Whether you are building your certification journey, strengthening your professional competence, or equipping your team for today’s digital trust demands, these sessions are designed to help you grow with practical knowledge and globally recognised frameworks.

📌 Register here: https://bit.ly/4g2Wscw

Invest in your skills. Strengthen your profession. Build digital trust with confidence.

You cannot automate trust. You have to govern it.One of the strongest messages from was clear: AI can help organisatio...
06/10/2026

You cannot automate trust. You have to govern it.

One of the strongest messages from was clear: AI can help organisations move faster, detect threats earlier, analyse more data, support decisions, and improve efficiency — but speed without oversight creates risk.

Across the conversations on AI governance, cybersecurity, digital trust, risk management, assurance, and leadership, one theme kept coming through:

Technology may enable decisions, but governance makes them accountable.

AI systems must be guided by clear risk appetite, strong controls, human oversight, privacy safeguards, legal awareness, ethical responsibility, and continuous monitoring. Whether in the SOC, audit function, boardroom, or business process, trust cannot be delegated entirely to a tool.

Because when AI gets it wrong, accountability still belongs to people.

AI can accelerate decisions. But only governance can make them trustworthy.

Can AI be trusted without oversight?

📌
05/10/2026

📌

05/10/2026

Trust is the outcome. Security and privacy are the inputs.

In his Digital Trust Keynote at , Mark Thomas challenged delegates to look beyond the strength of controls, systems, frameworks, and audits — and ask a deeper question:

Do people actually trust us?

Using the image of a highly secured bank vault, he reminded the room that even the strongest controls do not matter if customers choose to walk away. A system can be secure. Privacy can be protected. Audits can be passed. But if customers, partners, third parties, and regulators do not trust the organization, then the technology is not delivering its true purpose.

In a market where money moves through handsets, agents, platforms, models, and third-party ecosystems, trust is no longer confined to physical infrastructure. It lives in the experience people have, the confidence they feel, and the integrity they believe the organization has.

Mark’s message was clear: digital trust cannot be left to chance. It must be understood, designed, governed, measured, and protected.

Because without trust, tools are just technology, frameworks are just paper, and strategy is just noise.

Digital trust is what turns security, privacy, governance, and technology into confidence.

Address

Uganda Institute Of/Communication And Information Technology (UICT), Plot 19-21 PortBell Road, Nakawa, Sat-Com Block 2
Kampala
256

Opening Hours

Monday 09:00 - 17:00
Tuesday 09:00 - 17:00
Wednesday 09:00 - 17:00
Thursday 09:00 - 17:00
Friday 09:00 - 17:00

Telephone

+256392893965 and +256 787467646

Website

,

Alerts

Be the first to know and let us send you an email when ISACA Kampala Chapter posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to ISACA Kampala Chapter:

Shortcuts

Share