- 0800222777
- cert@ucc.co.ug
- Colville Street, Communications House
Overview of the Digital Financial Services (DFS) security testing laboratory
How & When was it established?
The Uganda Communications Commission (the Commission), in collaboration with the International Telecommunications Union (ITU), established a Digital Financial Services (DFS) security testing laboratory, which became operational in 2023.
What is the purpose of the Lab?
The DFS security lab aims to provide a common methodology to conduct security audits for mobile DFS apps to address systemic vulnerabilities.
Systemic vulnerabilities include those that can impact the confidentiality, integrity and availability of services. Such vulnerabilities include, but are not limited to:
- Improper credential usage
- Insecure authentication/authorization
- Insecure communication
- Inadequate data privacy controls
- Insecure data storage
- Application misconfigurations
Objectives of the DFS security testing laboratory
The DFS security lab seeks to:
- Conduct security assessments on DFS applications across multiple platforms using established and emerging security frameworks.
- Collaborate with key DFS providers, regulators, and industry experts to identify and mitigate security risks, implement robust security frameworks, and adopt common security practices and international standards.
- Promote awareness of DFS security issues and provide practical guidance on effective mitigation strategies.
- Support adoption of global DFS security standards.
Frequently Asked Questions
Who can access this service?
Owners of mobile applications serving in the digital financial services space are eligible to benefit from this service.
Is this service free?
Yes, this service is free.
What mobile applications are in scope for testing?
Currently, the DFS lab is only conducting security tests for android, iOS and Sim Tool Kit (STK) based applications.
How do I access this service?
Send an email to cert@ucc.co.ug with your application details including the google play store / apple store application links (where applicable) requesting for this service.
You may also reach out via + 256 414 339000/ 312 339000 for more inquiries.
DFS Security Resources
