INFORMATION AND CYBER SECURITY STRATEGY OF SRI LANKA LT 4.1.2. Wewill facilitate relevant stakeholders to conduct information 4.4. Awareness and Capacity Building of Staff Working with Digital Government and cyber security risk assessments to uncover weaknesses and Some facts (2017) vulnerabilities in digital government systems and infrastructure, and to prioritize and implement appropriate security controls to mitigate those . 35% use 36.4% same haven't password for changed al accounts J} passwor - 31% save since passowords } | account was identified weaknesses. . 4.2. Security Policy for Organizations that Maintain Digital Government Systems We will facilitate the organizations maintaining digital government systems and in browers informal y Policy international standards. 4.3. y Digital Government Infrastructure Protection Unit 4.3.1. To effectively defend the digital their email accounts have unknown 45.5% are unaware that been compromised infrastructure from emerging threats, 30% do not know how to how to use L 44.1. J It is widely believed that the awareness of Sri Lankan public officers on information and cyber security should be improved. We will, therefore, first conduct information and cyber security readiness surveys on public sector employees periodically to assess their readiness to work in a digital government We will coordinate multi-sector cybersecurity exercises with the involvement of this unit. Through these exercises, we aim to identify vulnerabilities arising from crosssector interdependencies and stresstest coordination and communication across sectors. \ passwords to protect sensitive documents activities. 4.3.2. person 73% do not have technology know how to identify whether their official computers are infected or not we will setup the Digital Government DIPA. This unit will be responsible for detecting and analyzing cyber threats and vulnerabilities, disseminating cyber threat alerts, and coordinating incident response from A ees ( government systems and Infrastructure Protection Unit under 39% open any attachment A . ocuments compromised 9g based on sensitive > 9% have realized that their email accounts are infrastructure to develop and implement the ws d created f organizations maintaining critical Information Security 55% do not vice no passwords to protect 44.2. environment. In line with the Competency Framework, CIOs and Technical staff working in digital government environment will be empowered with appropriate skills and knowledge on information and cyber security.