It's 2023 and Sri Lanka doesn't have a cyber security authority
(2023/05/26)
- Reference: 1685061733
- News link: https://www.theregister.co.uk/2023/05/26/sri_lanka_cybersecurity_authority/
- Source link:
Sri Lanka's Ministry of Technology has confirmed it will have a cyber security authority – at some point.
According to [1]local media , state minister Kanaka Herath told the Cyber Security Conference in Colombo that efforts to create a cyber security authority in 2023 are under way.
The authority is established through the [2]Cyber Security Bill [PDF] as part of a wider strategy. The bill is expected to be [3]submitted to the country's parliament this year.
[4]
Sri Lanka ranks 81st out of 175 countries in the [5]National Cyber Security Index . In January, it scored a 0 for protection of digital and essential services. The country was, however, given nine out of nine points for education and professional development.
[6]
[7]
Yet, as of 2020, Sir Lanka claimed membership among the third of countries that did not have some form of a national cyber security strategy.
The Global Cybersecurity Index in 2020 [8]listed over half of the world's countries as having a computer incident response team (CIRT) and almost two-thirds as having some form of a national cyber security strategy.
[9]Five Eyes and Microsoft accuse China of attacking US infrastructure again
[10]This legit Android app turned into audio-snooping malware – and Google missed it
[11]Philly Inquirer says Cuba ransomware gang's data leak claims are fake news
[12]IT security analyst admits hijacking cyber attack to pocket ransom payments
According to management consulting firm [13]Kearney , in Asia many CIRTS play the role of de facto national cyber security agencies – for better or worse.
The European Union developed a region-wide cyber security strategy in 2013 – but developing such a framework has been more difficult for ASEAN, of which Sri Lanka is a member. The region is bifurcated by having some countries – like Singapore, Malaysia, Thailand and the Philippines – with strategies in place, while others do not.
[14]
According to Kearney, ASEAN faces challenges in pulling together a unified framework "largely because of the inherent absence of a power to legislate or veto budgets and appointments."
"The lack of sector-specific governance and policies is a region-wide issue, resulting in limited transparency and a lack of sharing of threat intelligence," said Kearney. ®
Get our [15]Tech Resources
[1] https://www.dailymirror.lk/business/Sri-Lanka-to-getCyber-Security-Authority-this-year/215-259739
[2] https://www.cert.gov.lk/documents/Cyber%20Security%20Bill.pdf
[3] https://mot.gov.lk/blog/2023/02/27/cybersecurity-act-to-be-presented-to-parliament
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZHAu5Qd3lpFsKUbE8b3GaAAAAMI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://ncsi.ega.ee/ncsi-index/?order=rank&type=c
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZHAu5Qd3lpFsKUbE8b3GaAAAAMI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZHAu5Qd3lpFsKUbE8b3GaAAAAMI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://www.itu.int/epublications/publication/D-STR-GCI.01-2021-HTM-E
[9] https://www.theregister.com/2023/05/25/china_volt_typhoon_attacks/
[10] https://www.theregister.com/2023/05/24/a_legit_android_app_turned/
[11] https://www.theregister.com/2023/05/24/philly_inquirer_cuba_ransomware/
[12] https://www.theregister.com/2023/05/24/it_security_analyst_blackmail/
[13] https://www.southeast-asia.kearney.com/documents/1781738/1782318/Cybersecurity+in+ASEAN%E2%80%94An+Urgent+Call+to+Action.pdf/80a880c4-8b70-3c99-335f-c57e6ded5d34#page=14&zoom=100,0,0
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZHAu5Qd3lpFsKUbE8b3GaAAAAMI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://whitepapers.theregister.com/
According to [1]local media , state minister Kanaka Herath told the Cyber Security Conference in Colombo that efforts to create a cyber security authority in 2023 are under way.
The authority is established through the [2]Cyber Security Bill [PDF] as part of a wider strategy. The bill is expected to be [3]submitted to the country's parliament this year.
[4]
Sri Lanka ranks 81st out of 175 countries in the [5]National Cyber Security Index . In January, it scored a 0 for protection of digital and essential services. The country was, however, given nine out of nine points for education and professional development.
[6]
[7]
Yet, as of 2020, Sir Lanka claimed membership among the third of countries that did not have some form of a national cyber security strategy.
The Global Cybersecurity Index in 2020 [8]listed over half of the world's countries as having a computer incident response team (CIRT) and almost two-thirds as having some form of a national cyber security strategy.
[9]Five Eyes and Microsoft accuse China of attacking US infrastructure again
[10]This legit Android app turned into audio-snooping malware – and Google missed it
[11]Philly Inquirer says Cuba ransomware gang's data leak claims are fake news
[12]IT security analyst admits hijacking cyber attack to pocket ransom payments
According to management consulting firm [13]Kearney , in Asia many CIRTS play the role of de facto national cyber security agencies – for better or worse.
The European Union developed a region-wide cyber security strategy in 2013 – but developing such a framework has been more difficult for ASEAN, of which Sri Lanka is a member. The region is bifurcated by having some countries – like Singapore, Malaysia, Thailand and the Philippines – with strategies in place, while others do not.
[14]
According to Kearney, ASEAN faces challenges in pulling together a unified framework "largely because of the inherent absence of a power to legislate or veto budgets and appointments."
"The lack of sector-specific governance and policies is a region-wide issue, resulting in limited transparency and a lack of sharing of threat intelligence," said Kearney. ®
Get our [15]Tech Resources
[1] https://www.dailymirror.lk/business/Sri-Lanka-to-getCyber-Security-Authority-this-year/215-259739
[2] https://www.cert.gov.lk/documents/Cyber%20Security%20Bill.pdf
[3] https://mot.gov.lk/blog/2023/02/27/cybersecurity-act-to-be-presented-to-parliament
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZHAu5Qd3lpFsKUbE8b3GaAAAAMI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[5] https://ncsi.ega.ee/ncsi-index/?order=rank&type=c
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZHAu5Qd3lpFsKUbE8b3GaAAAAMI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZHAu5Qd3lpFsKUbE8b3GaAAAAMI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://www.itu.int/epublications/publication/D-STR-GCI.01-2021-HTM-E
[9] https://www.theregister.com/2023/05/25/china_volt_typhoon_attacks/
[10] https://www.theregister.com/2023/05/24/a_legit_android_app_turned/
[11] https://www.theregister.com/2023/05/24/philly_inquirer_cuba_ransomware/
[12] https://www.theregister.com/2023/05/24/it_security_analyst_blackmail/
[13] https://www.southeast-asia.kearney.com/documents/1781738/1782318/Cybersecurity+in+ASEAN%E2%80%94An+Urgent+Call+to+Action.pdf/80a880c4-8b70-3c99-335f-c57e6ded5d34#page=14&zoom=100,0,0
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZHAu5Qd3lpFsKUbE8b3GaAAAAMI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://whitepapers.theregister.com/