Are the Sri Lankan Cyber Laws Sufficient to Safe Guard the IT Professionals and Victims of Cyber Attacks

PurposeUsers’ mistakes due to poor cybersecurity skills result in up to 95 per cent of cyber threats to organizations. Threats to organizational information systems continue to result in substantial financial and intellectual property losses. This paper aims to design, develop and empirically test a set of scenarios-based hands-on tasks to measure the cybersecurity skills of non-information technology (IT) professionals.Design/methodology/approachThis study was classified as developmental in nature and used a sequential qualitative and quantitative method to validate the reliability of the Cybersecurity Skills Index (CSI) as a prototype-benchmarking tool. Next, the prototype was used to empirically test the demonstrated observable hands-on skills level of 173 non-IT professionals.FindingsThe importance of skills and hands-on assessment appears applicable to cybersecurity skills of non-IT professionals. Therefore, by using an expert-validated set of cybersecurity skills and scenario-driven tasks, this study established and validated a set of hands-on tasks that measure observable cybersecurity skills of non-IT professionals without bias or the high-stakes risk to IT.Research limitations/implicationsData collection was limited to the southeastern USA and while the sample size of 173 non-IT professionals is valid, further studies are required to increase validation of the results and generalizability.Originality/valueThe validated and reliable CSI operationalized as a tool that measures the cybersecurity skills of non-IT professionals. This benchmarking tool could assist organizations with mitigating threats due to vulnerabilities and breaches caused by employees due to poor cybersecurity skills.

Download Full-text

A Criminological Study on Trends of Cybercrimes Against Financial Institutions in Sri Lanka

International Journal of Information Security and Cybercrime ◽

10.19107/ijisc.2021.02.08 ◽

2021 ◽

Vol 10 (2) ◽

pp. 81-88

Author(s):

K.G.L. CHAMUDDIKA ◽

K.G.N.U. RANAWEERA

Keyword(s):

Sri Lanka ◽

Financial Institutions ◽

Commercial Banks ◽

Banking Industry ◽

Cyber Attacks ◽

Sri Lankan ◽

Confidential Data

Cybercrimes are virtual crimes that evolved according to nature and the intention of the culprit. Numerous cyber-attacks have been led by several anonymous groups to establish the censorship of information. As the technology used for any activity in the banking industry is continuously upgrading with monetary values as well as with information of clients, it is necessary to have a piece of updated knowledge on both cyber-attacks and technology for both clients and employees of the banking industry. Furthermore, it is crucial to study the nature, techniques and impact of cybercrimes as its techniques are continually evolving with technology. Moreover, it would be possible for individuals to assume that their confidential data and transactions are secured with the bank. This study investigated trends of cybercrimes against Sri Lankan financial institutions using seven Licensed Commercial Banks and uncovered its nature, techniques, impact and strategies that were applied by institutions for the protection of its clients.

Download Full-text