INFORMATION AND CYBER SECURITY STRATEGY OF SRI LANKA 6.2. Partner with Telcos Nature and ISPs Seaton Partner with Social Public-Private, Local- and NGOs Peeritles Groups International Research er vies Partner iene Owners Work with Ueto 6.3. Resilience Our systems depend on the critical infrastructure information systems that are owned by non-government actors. There are tal elgareliceyatel| Parterships Tia many private companies which provide Training critical services to the general public in the domains of finance, power and energy, transport, aviation, health and so forth. Although the government is not responsible for securing the critical information infrastructure owned by private firms, it is essential to support these private firms to protect their information infrastructure where a damage to the information infrastructure would interrupt the day-today lives of citizens. We will therefore, work closely with Critical Infrastructure owners and operators to expand initiatives to secure the CII ecosystem, preserve the benefits of cyberspace, and avoid unnecessary impediments to technological evolution. coy ile (=163 Our Initiatives 6.1. Partner with Telecommunication and ISPs to Protect Internet Users 6.1.1. ISPs in Sri Lanka occupy a unique position as the gateway to Sri Lanka's cyberspace. We will, therefore, set up a Telco-CERT with the involvement of Telcos and ISPs to effectively handle emerging cyber threats. Telco-CERT would be involved in tackling phishing attacks, blocking malicious domains and IP addresses, and deploying other measures to disrupt malware attacks including measures to secure the telecommunications and Internet 6.1.2. routing infrastructure. We will encourage ISPs to increase their customers’ awareness on cyber security risks, and best practices for avoiding cyber threats. Partner with Firms Operating Critical Information Infrastructure (CII) to Create Stregnth Partner IP Reputational Service We will work with Telecommunication Regulatory Authority of Sri Lanka (TRC) and ISPs to determine the possibility of maintaining an Internet Protocol Reputation Service. This will facilitate online service providers to obtain information about an IP address to which they are connecting. Through this service, spreading of harmful content shall be minimized. 6.4. Empower Sectoral Ministries Maintaining Digital Government Systems The primary responsibility of safeguarding security in each sector's digital government systems and infrastructure, and of ensuring adequate preventive measures against cyber threats lies with the sectoral ministries. This means that each sectoral ministry has a responsibility of identifying critical infrastructure in their sector, and ensuring