INFORMATION AND CYBER SECURITY STRATEGY OF SRI LANKA Preface Around the globe, digital technologies have evolved into a powerful economic tool that has improved quality of life of citizens and transformed the way that governments, businesses, and citizens connect, engage, and access information and services. Many societies are now dependent on digital technologies which has led these technologies to be considered as a fundamental social infrastructure. Along with their numerous benefits digital technologies also bring with them numerous cyber threats. The global number of cyber security incidents Information and Cyber Security Strategy which will be implemented over a period of five years from 2019 to 2023. Our strategy aims to create a resilient and trusted cyber security ecosystem that will enable Sri Lankan citizens to realize the benefits of digital technology, and facilitate growth, prosperity and a better future for all Sri Lankans. Our strategy is underpinned by six pillars: 1. 2. will be $2.1 trillion which is almost four times the estimated cost of breaches in 2015’. In Sri Lanka, The Sri Lanka Computer Emergency Readiness Team| Coordination Centre (Sri Lanka CERT|CC) received 3. 4. detect, defend and respond to cyber attacks Collaboration with public sector authorities to ensure that the digital government systems implemented and operated by them have the appropriate level of cyber 3907 cyber security related incidents in 2017, which is a significant increase from 2010. 5. In this context, we, the government of Sri Lanka, seeks 6. to show our commitment to keep the nation safe, secure and prosperous, by introducing Sri Lanka's first the National Information and Cyber Security Strategy Enactment and formulation of legislation, policies, and standards to create a regulatory environment to protect individuals and organizations in the cyber space Development of a skilled and competent workforce to recorded in 2015 was 59.06 million’. A study estimates that the total annual cost of all data breaches by 2019 Establishment of a governance framework to implement security and resilience Raising awareness and empowering citizens to defend themselves against cybercrimes Development of public-private, local-international partnerships to create a robust cyber-security ecosystem WaT ARS NNO