Information
Constituency
Sri Lanka CERT|CC functions to serve the members of its Constituency. As a National CERT|CC, our activities are limited to the boundaries of Sri Lanka, and therefore, our constituency is defined as being:
"All ICT users of Sri Lanka, Individual or Ogranization, who voluntarily subscribe to our Services, and are bound by our Standards"
Philosophy
Transactions & Interactions
By default, all Sri Lankan ICT users become constituents of Sri Lanka CERT|CC.
Transactions between people and systems, based on Information Communication Technology (ICT), be it for online banking, E-mailing or collaborative development, represent chains of interaction.
All it takes is one weak party in that chain to be compromised, for the entire chain to be compromised in turn.
Sri Lanka CERT|CC firmly believes in the philosophy “a chain is only as strong as its weakest link”. To that end, Sri Lanka CERT|CC strives to strengthen the security posture of its entire constituency, so that even the smallest members are adequately protected against cyber attacks.
Tenets of Information Security
Information is fast becoming an indispensable resource for the progress of our nation. There are three key properties of information to be considered when evaluating the security of information.
Confidentiality
Information is only communicated and accessible to people who “need to and are authorized to know”
Integrity
A user must be able to trust information without any hesitation. This means that information must not be altered (by accident or deliberately) or incorrectly input (invalid).
Availability
Information must be made available when it is needed. This means that systems hosting information must be configured to ensure continuous availability of services and information.
Our services are centered about these three tenets of Information Security.
