INFORMATION AND CYBER SECURITY STRATEGY OF SRI LANKA Cyber Security Landscape Our Status in the Cybersecurity Index Among the 193 ITU member countries, Sri Lanka is ranked 72 in the Global Cybersecurity Index (GCI) in the year 2016°. GCI assesses a country’s overall commitment towards cyber security in relation to five different dimensions, namely (a) legal, (b) technical, (c) capacity building, (d) organizational, and (e) cooperation f dimensions®. Our performance in each dimension is assessed and rated either as ‘. Rank 72 Global Cybersecurity Inde initiating, maturing, or leading. Sri Lanka's overall performance is rated as maturing. Our Performance in the GCI? (2017) a. Sri ma LEGAL: We are Initiating Assessed with reference to the existence of legislation on cybercrime and cyber security, and legal training. Assessment Criteria XO4I9 Assessment Sub Criteria » Our Status a. Legal Cyber Crime Legislation Cyber Security Legislation Cyber Security Trainings Initiating Initiating Leading b. Technical National CERT/CIRT/CSIRT | Leading b. TECHNICAL: We are Maturing Assessed with reference to the existence of technical institutions and frameworks for dealing Government CERT/CSIRT Leading Sectoral CERT/CIRT/CSIRT Leading Standards for Organizations | Initiating Standards for Professionals Initiating c. Child Online Protection Initiating Standardization bodies initiating R & D Programs Maturing with cybersecurity related issues. CAPACITY BUILDING: We are Maturing Measured based on the existence of research and development, education and training ¢. programs, certified professionals and public Capacity Building sector agencies fostering capacity building d. ORGANIZATIONAL: Professional training courses | Leading oo Assessed based on the existence of institutions national level e. we d. incentive mechanisms intiating Organizational | Strategy Responsible Agency COOPERATION: We are Initiating information sharing networks Maturi Home-grown industry ce Measured based on the existence of . . partnerships, cooperative frameworks and Educational ue eons P nya for policy formulation and coordination, and strategies for cybersecurity development at the Leading Public awareness campaigns | Leading We are Maturing . Cybersecurity good practices e. Cooperation : og initiating Initiating Maturing ae Ofer Sy PENS ae Multilateral agreements Leading International participation Leading Public-private partnerships Maturing Interagency partnerships Initiating Bilateral agreements Initiating