In the modern organizational landscape, information technology plays a pivotal role in shaping business processes. The increasing reliance on IT necessitates a focus on the confidentiality, availability, and integrity of both enterprise and customer data, making information security a paramount concern. This study delves into the challenges faced by Small and Medium-sized Enterprises (SMEs) in Fort Portal Central Division during their information security governance efforts, highlighting issues such as limited resources, budget constraints, time limitations, and a lack of expertise in drafting and ensuring compliance with security policies. To address these challenges, a comprehensive framework for improving Information Security Governance in SMEs was developed and evaluated. Primary data were collected from 351 respondents, including Proprietors, Directors, CEOs, Managers, and operations personnel, shedding light on the specific hurdles faced by SMEs. The proposed framework underwent rigorous evaluation based on design science parameters, demonstrating efficiency and usability. The results of the evaluation revealed that the developed framework effectively addressed the identified challenges, fulfilling the study's objective. The study recommends SMEs in Fort Portal City to implement the framework to enhance their Information Security Governance efforts. Additionally, policy makers in Uganda, including the National Information Technology Authority Uganda (NITA-U) and Uganda Investments Authority (UIA), can leverage the designed framework to make informed decisions regarding SMEs and information security management and governance. This research contributes valuable insights to the broader discourse on information security governance in SMEs, particularly within the context of Fort Portal City.