INFORMATION AND CYBER SECURITY STRATEGY OF SRI LANKA Thrust # 1: Establishment of the Governance Framework Our Strategy Den] In 2006, the government of Sri Lanka established Sri Infrastructure Lanka CERT|CC as the single trusted source of advice on the latest threats and vulnerabilities Protection Agency affecting computer systems and networks, charged feds Sectoral Framework with the responsibility of providing technical CERTS support in responding to and recovering from cyber-attacks. Sri Lanka CERT was established under the Information and Communication Technology Agency (ICTA) of Sri Lanka, and now it is operating : . _ directly under the purview of the Ministry of Telecommunication, Digital Infrastructure and Foreign Employment. eerie ; : RCNA Ne) orencis ee eee Research Se As the complexity of the cyber security ecosystem increases, the government of Sri Lanka recognizes the necessity of introducing a National Information amy Operating eK: ant and Cyber Security Strategy to cope with emerging National etn threats. It is a high-level top-down approach to National rane Nel information and cyber security that establishes a range of national objectives and priorities that should be achieved in a specific timeframe. In line with the strategy, a Digital Infrastructure Protection Agency will be established. The Agency will be responsible for overseeing the implementation of the cyber security strategy, setting national polices, facilitating the protection of critical national infrastructure, educating citizens, building a pioneering technology competent workforce, and promoting industry development. woe ce Our Initiatives 1.1. Our strategy is to establish a powerful agency which oversees the overall implementation of the Information and Cyber Security Strategy of Sri Lanka, and to establish specialized subordinate agencies for effectively battling emerging cyber threats Establishment of the Digital Infrastructure Protection Agency (DIPA) of Sri Lanka DIPA will be established as the apex institution for all cyber security related affairs in Sri Lanka. The Agency mandate shall be to oversee the implementation of the National Information and Cyber Security Strategy.