Strengthening Cybersecurity for Sri Lanka’s MSMEs: A New Initiative by The Asia Foundation and Google

By Nuzla Rizkiya

In an era where digital transformation is accelerating, the need for robust cybersecurity measures has never been more critical. Recognizing this urgent requirement, the Asia Foundation, in collaboration with Google Corporation, has launched a groundbreaking initiative aimed at enhancing the cybersecurity resilience of micro, small, and medium enterprises (MSMEs) across Sri Lanka. This initiative, backed by a generous US $15 million fund from Google.org, promises to equip 13,000 MSMEs with the necessary skills and tools to navigate the complex landscape of cybersecurity threats.

A Collaborative Effort for a Safer Digital Environment

The launch of this fund marks a significant step in a broader initiative targeting the Asia-Pacific (APAC) region, where Google.org aims to uplift 300,000 nonprofits, MSMEs, and social enterprises across 12 countries, including Bangladesh, India, Indonesia, and Vietnam. The Asia Foundation’s commitment to Sri Lanka is particularly noteworthy, as it seeks to address the unique challenges faced by local businesses in the digital realm.

Dinesha De Silva, the Sri Lanka Country Representative for the Asia Foundation, emphasized the importance of this project during the launch event. “In Sri Lanka, the project aims to educate and equip 13,000 MSMEs with the necessary skills to navigate cybersecurity threats. This will be achieved through training sessions planned across all nine provinces,” she stated. This comprehensive approach ensures that businesses from diverse backgrounds and regions can access the support they need.

Training and Resources: Empowering MSMEs

The initiative is designed not only to provide training for MSMEs but also to establish two cybersecurity clinics at the Sri Lanka Institute of Information Technology (SLIIT) and Uva Wellassa University. These clinics will serve as hubs for specialized training, where undergraduates will learn to assist businesses facing cybersecurity challenges. This dual focus on education and practical support is crucial in building a resilient cybersecurity framework within the country.

One of the most pressing threats to smaller enterprises in Sri Lanka is phishing. Cybercriminals often employ malicious emails and links to redirect users to fake web pages, aiming to collect sensitive personal information and perpetrate data breaches. The impersonation of delivery services is among the most common scams affecting Sri Lankans, where users are tricked into paying fees to fraudulent entities. By equipping MSMEs with the knowledge to identify and mitigate such threats, this initiative aims to create a safer digital environment for all.

The Current Cybersecurity Landscape in Sri Lanka

Sri Lanka’s current standing in the National Cyber Security Index is concerning, as the country ranks 83rd out of 176 nations. This ranking highlights the vulnerabilities that Sri Lanka faces in the digital space, particularly with the increasing frequency of cyberattacks targeting its telecommunications and internet service provider sectors. According to cybersecurity firm Imperva, these attacks are not only disruptive but can also have far-reaching consequences for businesses and consumers alike.

Despite the passage of the Online Safety Act in January 2023, the anticipated Cyber Security Act remains stalled, with discussions having begun as far back as 2018. This delay underscores the urgent need for a cohesive and comprehensive approach to cybersecurity legislation in the country.

A Call for Collective Action

The Asia Foundation has articulated that addressing these pressing issues requires a concerted and sustained effort to strengthen cybersecurity frameworks and regulatory mechanisms. “Through the government’s various efforts and regional initiatives such as the APAC Cybersecurity Fund, the country’s cybersecurity ecosystem will be strengthened to navigate the internet safely and confidently,” the foundation noted in a media release.

As Sri Lanka embarks on this critical journey towards enhanced cybersecurity resilience, the collaboration between the Asia Foundation and Google serves as a beacon of hope for MSMEs. By empowering businesses with the knowledge and resources to combat cyber threats, this initiative not only safeguards individual enterprises but also contributes to the overall stability and growth of the nation’s economy.

In conclusion, the launch of the US $15 million fund is a pivotal moment for Sri Lanka’s MSMEs, marking the beginning of a new chapter in the fight against cybercrime. With the right training, resources, and legislative support, Sri Lanka can build a safer digital future for its businesses and citizens alike.