A Cybercrime Incident Response Management and Recovery Framework for Kampala Metropolitan Area

The Global Cyber Security Capacity center in collaboration with the Commonwealth Telecommunication Organization (CTO) identified incident response as an iconic dimension towards management of cybercrime in Uganda and according to the National IT Survey 2022, 69% of the Local Governments and 59% of MDAs reported incidents of Cybercrime due to lack of better initiatives to Cyber security response. To address the mentioned concern, this study sought to develop a cybercrime incident response, management and recovery framework. Consequently, the study adopted descriptive approaches augmented by quantitative techniques to measure the variables. A sample size of 57 was obtained using Yamane's formula out of whom 45 responded and the data was analyzed using SPSS. The study found that whereas there were increased cybercrimes in Kampala, there is need for deliberate investment in terms of financial and human capacity development pursuant to providing in-demand cyber security support. Adoption of automation mechanisms in each stage of the cybercrime response, management, and recover will provide significantly improve the efficiency and effectiveness while providing realtime information to support the responsive decisions. The developed framework can be used to respond to, manage and recover from cybercrime incidents in Kampala.