Have you ever watched a crack in the wall and thought, “It’s nothing, just cosmetic”? Weeks later, the same crack widens, swallowing paint, bricks, and peace of mind. That’s how risk works. The small ones you ignore are the ones …
What is more dangerous, a lion you see charging at you, or a snake coiled silently under your chair? Every boardroom I enter is filled with executives boasting about the lions they’ve slain. Fraud? They have auditors. Cybersecurity? Firewalls in …
It was a Wednesday morning in June 2024 when a mid-sized bank woke up to a nightmare. The ATMs in Ntinda and Kabalagala were spitting out cash in irregular amounts. Customers were lining up, bewildered, some receiving double withdrawals while …
On 4th September 2023, leaders at the agribusiness cooperative approved a UGX 280 million loan to a long-standing distribution partner. The justification was simple: the partner had been with them for 11 years, always paid on time, and was “part …
“The attackers are not coming. They are already inside, and they are faster than you.” In March 2025, a mid-sized SACCO in central Uganda noticed something odd. An internal report had been edited at 2:13 AM by someone who was …
What is a black swan? Some events have never happened before. No model can anticipate them. These are modern-day black swans. They pose high risks. Today, risk is not a possibility; it is a certainty. From economic shocks and cybersecurity …
Kampala, June 2025. A senior finance officer at a regional bank receives a Zoom call from her Group CFO. The CFO is in Nairobi, but his face is on screen. His voice is unmistakable. He urgently instructs a confidential payment …
“It wasn’t me.” That was the first thing Joseph, the internal auditor of a mid-sized Ugandan bank, blurted out when we summoned him for a forensic interview. We had been called in by the Board after UGX 5.8 billion vanished …
On the morning of June 18th, 2025, a mid-level bank manager in Kampala received a call that left him trembling. His personal email, bank login, and entire WhatsApp chat history had been compromised. The attacker hadn’t cracked his password. No. …
Cyberattacks do not begin with code. They begin with people. One click on a malicious email, one weak password, one moment of inattention is all it takes to set off a chain of events that can cripple an entire organisation. …