INFORMATION AND CYBER SECURITY STRATEGY OF SRI LANKA 4.4.3. As per the Information and Cyber Security Competency Framework (Thrust Area 3), we will, conduct information and cyber security awareness activities across all levels of government staff. 4.5. Chief Information Security Officer and Information Security Officers 45.1. We will work with the Department of Management Service to establish a “Chief Information Security Officer” position in the public service, which will be the highest level position in the information and cyber security domain in the public service. 45.2. Depending on the usage of ICT systems at public organizations, we will appoint Information Security Officers for government organizations and develop their capacity through comprehensive knowledge building exercises. 4.6. Security-by-Design in Digital Government Thrust # 5: Raising Awareness and Empowerment of Citizens Our Strategy The Internet has become important for all aspects of daily life including education, work, and participation in society. A considerable segment of society is becoming more and more dependent on the Internet thereby becoming more vulnerable to cybercrime. A major reason for such vulnerabilities to cybercrime is lack of awareness among citizens about possible cyber threats and their consequences. Theft of identity, stealing of credit card numbers, and privacy violation and unauthorized access on social media for example are commonly caused due to the lack of awareness of citizens. It is, therefore, essential to raise citizens’ awareness about emerging cyber threats and empower them with the knowledge and skills necessary to defend themselves against evolving cyber threats. Some facts on the disclosure of identity and privacy by Sri Lankan youth through social media Systems Development 4.6.1. 4.6.2. Security-by-Design is a best practice which can be adopted to secure digital government upfront and throughout its life cycle. By integrating risk assessment into the system development life cycle, tradeoffs between security, cost and functionalities can be balanced. We will encourage solution developers to incorporate security-by-design principles when developing digital government systems and digital infrastructure. We will work with the National Procurement Commission of Sri Lanka to incorporate such conditions to standard government bidding documents. 65% Disclose . : their email Addresses 47% Disclose on: 18% Disclose Home Address Contact Numbers ‘ 24% Disclose Work Address 25% Disclose their Relationships and Marital Status 76% Reveal their Date of Birth