INFORMATION AND CYBER SECURITY STRATEGY OF SRI LANKA Thrust # 4: Resilient Digital Government Systems and Infrastructure Our Strategy Sri Lanka has advanced rapidly over the past decade in developing various digital government initiatives. Multimillion investments made on various digital government initiatives have helped Sri Lanka to advance from 101 (2008) to 79" position (2016) in Our strategy is to ensure that our digital systems and digital infrastructure are resilient to cyber threats, through implementing risk management processes, implementing appropriate security policies and strategies at the organizational level, increasing awareness and building the capacity of public sector staff at all levels the e-Government Development Index’. To date Sycreu sia] there are about 500 government websites and more than 50 e-services facilitating citizens to obtain services through the Internet. e-Administrative applications have been developed by public organizations that maintain critical infrastructure with the aim of increasing the organizational Risk Assessment Governmen mes. Security Policy efficiency thereby providing better services for citizens. Lanka Government Network, and Lanka Government Cloud provide the necessary digital infrastructure for e-services and e-administrative services. Resilient Digital Readiness PSSA S Although digital government initiatives promise tremendous benefits for citizens and government, they also bring threats of various cyberattacks such as malware attacks, unauthorized access, and denial of service attacks. Cyber-attacks on digital government services can cause significant disruptions to the public service delivery, and thereby destroy public confidence. Our citizens will not embrace digital government if their information cannot be securely kept in the government systems. It is, therefore, essential to adopt appropriate strategies to ensure security of digital government systems and critical information infrastructure. Government SUE LIG| Infrastrcture Awareness and Capacity Building [ie sector Cyber Dirlls Securityby-Design Our Initiatives 4.1. Information and Cyber Security Risk Assessments 4.1.1. Wewill conduct a survey to identify the organizations (both private and public) which maintain critical information systems. An inventory of organizations shall be developed based on the criticality of the information infrastructure maintained by the relevant organization.