In most Sri Lankan organisations, cybersecurity is viewed as an IT concern, something for the "tech people" to handle once operational systems are running smoothly.
This mindset is dangerously outdated, as cybersecurity is a governance and leadership issue in today's digital economy.
In this economy, every business process, from payroll to procurement, depends on interconnected systems, making cybersecurity a top priority.
Cybersecurity is not an IT problem – it’s a boardroom responsibility
A common pattern is seen across organisations, where the head of IT is expected to handle cybersecurity alongside other tasks such as server maintenance and user support.
Author's summary: Cybersecurity is a boardroom responsibility, not just an IT concern.