The Digital Trust Alliance, together with a coalition of professional organisations in Sri Lanka, has called on the government to strengthen cybersecurity governance and institutional resilience across the public sector following recent incidents involving government financial systems.

Addressing President Anura Kumara Dissanayake in a letter dated April 27, the Alliance noted that investigations are underway into the diversion of approximately USD 2.5 million after a breach of Finance Ministry systems. 

While stressing that they do not seek to prejudge the facts, the organisations said the incident has raised serious public concern and highlighted the need for stronger preparedness, accountability, and resilience.

As such, the Alliance proposed a structured advisory engagement between government institutions and professional bodies to identify practical governance and assurance measures. 

Suggested outcomes include:

• Establishing a designated government cybersecurity governance structure.
• Clear ownership and accountability for recommendations.
• A structured maturity and gap assessment of current systems.
• Alignment with recognised frameworks such as the NIST Cybersecurity Framework 2.0.
• Convening a focused public‑sector cybersecurity roundtable.

The letter further recommended involving institutions such as the Ministry of Digital Economy, Sri Lanka CERT, the Data Protection Authority, and GovTech.

“Our purpose is not to criticise but to offer constructive support. Cybersecurity is now a matter of financial integrity, public trust, institutional continuity, and national resilience,” the Alliance stated.

The organisations expressed readiness to contribute expertise from certified cybersecurity professionals, auditors, governance specialists, and ICT practitioners, noting that structured engagement could strengthen public confidence and provide clearer implementation priorities for Sri Lanka’s digital future. (Newswire)

The post Professionals urge stronger cybersecurity governance after Finance Ministry breach appeared first on Newswire.

The Cabinet has approved a proposal to establish a Threat Hunting and Malware Analysis Lab under the Sri Lanka Computer Emergency Readiness Team (Sri Lanka CERT).

The initiative aims to strengthen cybersecurity as the country advances major digital transformation projects, including the Sri Lanka Digital Identity Card, National Data Sharing Platform, and the Lanka Government Cloud.

Creating a secure digital environment has been identified as critical to the success of these initiatives.

Government Spokesperson Minister Nalinda Jayatissa said that expertise from a foreign country has not been sought to set up this lab thus far.

The new research unit will focus on identifying and countering cyber threats, analyzing malware, and building specialized human resource capacity. The proposal was submitted by the President in his capacity as Minister of Digital Economy. (Newswire)

The post Sri Lanka to get new cybersecurity lab to support digital transformation appeared first on Newswire.

In light of recent cybersecurity incidents that have garnered significant public attention, the Digital Trust Alliance (DTA) has reaffirmed its commitment to fostering a resilient and ethically governed digital ecosystem in Sri Lanka. 

Issuing a statement, DTA said these developments serve as a stark reminder of the complex and evolving nature of cyber threats, underscoring the urgent need for organisations to embed Digital Trust at the heart of their corporate governance and strategic planning.

As part of its regular industry deliberations, the DTA Board convened recently to reflect on the broader implications of such incidents for Sri Lanka’s public and private sectors. The discussions centred around the critical intersection between cybersecurity, consumer confidence, and organisational accountability.

-Protecting Digital Trust: Beyond Compliance to Strategic Readiness 

Cybersecurity incidents, irrespective of sector, highlight the fragile nature of Digital Trust and the significant responsibility entrusted to organisations that manage customer data. While technical defences are essential, the DTA emphasises that building Digital Trust requires a holistic approach encompassing: 

• Executive-level accountability for cybersecurity posture and governance. 
• Recognition of cybersecurity investment as a strategic imperative, not merely an operational expense. 
• Strategic communication and robust crisis management capabilities. 
• Institutionalisation of cybersecurity drills and executive tabletop exercises to build operational resilience. 
• Integration of governance, risk management, and compliance (GRC) practices aligned with global best standards.

-Elevating Industry Readiness: DTA’s Strategic Focus Areas 

The DTA will continue to collaborate with like-minded industry associations, regulatory bodies, and professional networks to:

1. Develop Media Guidelines for Responsible Reporting 

The DTA will lead efforts to create media reporting guidelines on data breaches. These guidelines aim to ensure accuracy, responsible terminology, and ethical reporting standards during cybersecurity incidents. Furthermore, the DTA is prepared to engage in capacity-building programs for journalists covering technology and cybersecurity. 

2. Empower Executive Leadership on Digital Trust 

DTA will work with industry partners to provide strategic advisory services for boards and senior leadership on embedding Digital Trust as an enabler of business objectives. This includes incident response readiness, reputational risk management, and executive education on governance in the digital age. 

3. Foster Organisational Resilience Beyond Technical Response 

Recognising that restoring Digital Trust post-incident extends beyond technical remediation, the DTA offers guidance on managing the full lifecycle of a cybersecurity incident — from detection and response to recovery, stakeholder engagement, and trust rebuilding.

-A Call to Action for Sri Lankan Enterprises 

This moment is a critical inflexion point for Sri Lanka’s digital economy. It is imperative that organisations assess their cybersecurity readiness, strengthen their governance practices, and embed Digital Trust principles into their operational DNA. 

The Personal Data Protection Act (PDPA) and emerging regulatory frameworks provide an important foundation. However, the DTA believes that policy must be complemented by organisational maturity, investment in security talent, and a culture of transparency and ethical stewardship of data. 

DTA states, moving forward, it remains steadfast in its mission, advocating for a resilient, secure, and trusted digital Sri Lanka. (Newswire)

The post Recent cybersecurity incidents : DTA highlights risk appeared first on Newswire.