Sri Lanka recognizes as tier-2 advancing nation in Global Cybersecurity Index

Sri Lanka has made remarkable progress in enhancing its cybersecurity framework, earning recognition as an 'Advancing' country in the Global Cybersecurity Index (GCI). 

This achievement underscores Sri Lanka's growing leadership in the region and its dedication to improving cybersecurity practices across critical areas.

The Global Cybersecurity Index, published by the International Telecommunication Union (ITU), serves as a reliable global benchmark for evaluating countries' commitment to cybersecurity. The fifth edition of the GCI (2024) provides an in-depth analysis of countries’ performance based on five key pillars:

1. Legal: Assesses the strength and comprehensiveness of laws addressing cybercrime and cybersecurity.
2. Technical: Evaluates the capabilities of national and sector-specific cybersecurity agencies.
3. Organisational: Examines national strategies and governance frameworks for cybersecurity.
4. Capacity Development: Focuses on building cybersecurity expertise through training, education, and public awareness initiatives.
5. Cooperation: Measures collaborative efforts between government entities, private sector players and international organisations.

Sri Lanka’s advancements across these pillars highlight its strategic approach to fortifying its cybersecurity environment, reflecting its commitment to creating a safer and more resilient digital ecosystem.

Sri Lanka CERT is actively working to enhance the country's cybersecurity standing and position itself to a T1: role modelling in the future.

To achieve this, Sri Lanka CERT has launched several key initiatives, including the implementation of the National Cybersecurity Strategy (2025–2028), the establishment of the National Certification Authority, and the operationalization of the National Cybersecurity Operations Center. Additionally, the country is advancing the implementation of a national information and cybersecurity policy, alongside various capacity-building activities aimed at strengthening the nation's overall cybersecurity framework.