Hackers exploit State entities failing to implement cyber security guidelines

Wednesday, 17 June 2020 01:41 - - {{hitsCtrl.values.hits}}

By Asiri Fernando

Some of Government ministries and institutions were targeted recently by cyber criminals due to them not implementing expert security guidelines, Defence Secretary Maj. Gen. (Retd) Kamal Gunaratne said yesterday.

Gunaratne stated that the Sri Lanka Computer Emergency Readiness Team (SLCERT) and the Sri Lanka Air Force Cyber Security group had been proactive in issuing guidelines to prevent vulnerabilities in the existing systems from being exploited and strengthening institutional resilience to cyber security.

“However, in spite of guidelines being regularly issued, some State organisations have failed to enact them, leaving them vulnerable to cyber-attacks. On the other hand many State institutions have taken the matter seriously and enacted the said guidelines,” Gunaratne said.

The Criminal Investigation Department (CID) has established a digital forensic centre and the Police Department has committed resources to equip it well and staff the centre with professionals, DIG Ajith Rohana said, pointing out the public could now make complaints to two sub units of the CID, established in Kandy and Matara, without having to come to Colombo to lodge a complaint about a cybercrime that affected them. Rohana said that more such sub centres would be opened in the future.

DIG Rohana explained that the laws governing cyber security and cybercrime needed to be updated and that proposals to amend the laws and bring them up to date with international standards were being prepared.