Introduction

3. Introduction 1988 - Bachelors in Computer Science (University of Vladimir Polytechnic Institute, The Soviet Union) 1991 - Masters in Computer Science 1993 – 1995 - Started my career in Bank of Uganda as a systems analyst 1995 to 1998 - Joined Pan World Insurance Co, from, as Computer Services Manager 1998 – July 2010 - Joined Shell International B.V. in July, where I spent 12 years. 1998 – 2003 - IT Manager for Shell Uganda Ltd December 2004 - Became a CISM 2005 – 2008 - Information Security Manager for Shell operations in Africa, working out of Cape Town, South Africa 2008 to 2010 - Business Services Manager – Strategy & Compliance, working at the Shell headquarters, in the Hague, the Netherlands

5. Referecefrom ISO IEC 27002 1. Define Information Security 2. Why Information Security is needed 3. How to establish security requirements 4. Assessing security risks 5. Selecting controls 6. Critical success factors 7. Organisational security a. Make an active commitment to information security. (Managing IS in an organization) b. Management IS Forum c. Coordinate information security implementation. d. Allocate information security responsibilities and authorities. e. Establish an authorization process for new facilities. f. Use confidentiality agreements to protect your information. g. Specialist Information Security advice h. Maintain relationships with other organizations. i. Maintain relationships with your special interest groups. j. Perform independent information system reviews.

6. Roadmap for Information Security Framework in MDAs