Sri Lanka is stepping into a new phase of its digital journey with a serious focus on cyber resilience. The government has rolled out the National Cybersecurity Strategy and the Government Cybersecurity Baseline Standards. These two pillars aim to bring every public sector body under one clear and risk aware governance structure. Thilak Pathirage, Chairman of SLCERT, explained this direction during the National Cybersecurity Conference in Colombo. He highlighted that this structure is meant to strengthen accountability and create a culture of steady improvement across government systems.

Real Time Monitoring Takes Center Stage

What this really means is that Sri Lanka wants to stay ahead of cyber threats instead of chasing them. The National Security Operations Centre already supports this goal by monitoring threats in real time and responding to incidents without delay. It brings together detection, analysis, and action under one coordinated space, which helps the country reduce reaction time and improve decision making.

A Rapidly Expanding Digital Ecosystem

Pathirage also pointed out that Sri Lanka’s digital landscape is growing fast. The Unique Digital Identity program, large scale digital public infrastructure, financial innovation, early stage AI adoption, and a national data exchange system are building a new digital economy. SLCERT has grown with this ecosystem. It has moved beyond incident response and now acts as the national authority for cybersecurity governance and digital trust. This shift recognises that secure systems are essential for economic progress and social stability.

A New Regulatory Structure On The Way

Sri Lanka plans to establish the Cybersecurity Regulatory Authority. Once active, it will expand SLCERT’s role even further. Pathirage explained that the authority will coordinate national cybersecurity operations, work with international and sector based CERT teams, maintain threat intelligence, guide incident response, lead awareness programs, and introduce Digital Trust and Certification Programs. Under the authority’s direction, SLCERT will maintain technical independence to ensure professional and impartial action. This approach aligns Sri Lanka with global best practices and strengthens confidence in its digital systems.

Moving From Reaction To Prevention

Cyber threats are growing more complex each year. Pathirage stressed that Sri Lanka must shift from a defensive stance to a proactive approach. Several national programs are already in progress. A Cyber Threat Intelligence framework will support informed decision making. An Attack Surface Management program aims to improve visibility across digital systems. A Web Risk Management Tool will allow citizens to report fraud and identify suspicious activity. He explained that cyber risks can disrupt essential services and shake public confidence. That is why cybersecurity is now viewed as a national priority linked to governance, economic stability, and sovereignty.

Global Tech Firms Show Strong Interest

Sri Lanka’s digital push is attracting global attention. Hans Wijesuriya, Chief Adviser to the President on Digital Economy, shared that major international and regional cloud players are exploring data center opportunities in the country. Sri Lanka’s location, skilled workforce, data protection laws, and strong connectivity make it appealing for such investments. Early talks are taking place with companies such as Amazon, Microsoft Azure, Oracle Cloud, Huawei, and Alibaba. A formal process is expected to begin later this year as part of the government’s hybrid cloud initiative.

This momentum signals a new digital chapter for Sri Lanka, shaped by preparedness, trust, and long term vision.