- Vulnerable to unauthorised access, info theft, defacement
A major cyber security vulnerability has been identified in Sri Lanka’s Parliament, with an official assessment warning that its digital systems could be exposed to unauthorised access, sensitive information theft and operational disruption.
The Parliament’s Annual Performance Report for 2025 has revealed that a cybersecurity assessment conducted by the Computer Emergency Readiness Team (CERT) identified 46 high-risk areas among 56 cybersecurity-related areas examined.
The assessment warned that malicious cyber activities could potentially compromise Parliament’s digital infrastructure, disrupt institutional operations, and even lead to the defacement of official websites, causing reputational damage to the country’s legislature.
It recommended that immediate measures be taken to address the identified vulnerabilities and strengthen Parliament’s information security framework.
When contacted in this regard, Systems Engineer and Deputy Head of the Parliamentary Secretariat's Information Systems and Management Department, Chaminda Willoraarachchi, initially queried The Daily Morning as to how the press had got wind of the CERT report, adding that they are in the process of implementing certain fresh measures and collaborative improvements.
"I’m not sure how this news was reported. We’ve been working with the CERT and are continuing our discussions with them. We are planning to implement some new measures and improvements in collaboration with the CERT. Apart from that, we haven’t been informed of such a situation specifically. There is a question about how this information was released and what the source of the news report was. We aren’t in a position to clearly understand how it was presented.
“However, we are planning to introduce several improvements. For example, the CERT has identified around 30 Government institutions as critical institutions, and the Parliament is one of them. The CERT has recommended several measures for these institutions, and we are planning to implement some of those recommendations”.