Top IT Security risks and challenges Presentation to East African Information Security Conference 13th August 2013 Gideon Twesigye, CISA Internal audit.