INFORMATION AND CYBER SECURITY STRATEGY OF SRI LANKA The agency shall, 1.1.1 Function as the command and control body to promote this strategy and play a leading role in implementing cyber security initiatives set forth in this strategy. 1.1.2. Provide technical support for law enforcement authorities in conducting digital forensic 1.2.3. Cyber Alert System with the involvement of Internet Service Providers (ISPs) and Telcos to deliver targeted, timely, and actionable information to Sri Lankans and to educate citizens on how to secure their computer systems. investigations. 1.1.3. 1.2.4. Build the capacity of sectoral CERTs and facilitate Sri Lanka CERT|CC to coordinate with sectoral CERTs for sharing incident information, best 1.1.5. 1.1.6. 1.2. Provide technical support to 1.2.5. government bodies such as Ministries, authorities, boards, corporations etc. Disseminate emerging cyber threat warnings to all Sri Lankans. Act as a certification body issuing licenses for firms providing information security related services. 1.2.2. Sri Lanka CERT|CC will continue to operate as the National CERT to protect users in the public and private sector organizations and the general public by providing up-todate information on potential threats and vulnerabilities, and by undertaking computer emergency response handling services. DIPA will establish a 24 X 7 Cyber Security Call Centre with a focus on assisting citizens, government organizations, and private firms to respond to cyber security incidents. forensics, audio forensics, video forensics and so forth. DIPA will establish the National Cyber Security Operating Centre (NCSOC) for monitoring threats to 1.2.6. digital government applications, critical information infrastructure, and critical systems of private firms. DIPA will establish the National Certification Authority (NCA) to address the limitations of the Certification Service Providers (CSPs). DIPA will establish a Research Unit for developing, coordinating and stimulating continuous research activities in the fields of Strategic Institutions Under the DIPA 1.2.1. DIPA will establish a Digital Forensic Lab to conduct digital forensic investigations and examinations in the areas of computer forensics, mobile practices and other security related information. 1.14. DIPA will establish a National Policy Research, Information Security Research, Cyber Security and Technology related research. 13 Monitoring and Evaluation (M&E) Framework A comprehensive results based M&E framework will be developed to assess and measure the performance of the outcomes and outputs as a result of the implementation of the strategy.