PUBLIC CONSULTATION: Call for views on Cloud Policy and Strategy for Sri Lanka
26 Jun 2025
Information and Communication Technology Agency of Sri Lanka (ICTA) presents the attached two draft documents "Towards a Sovereign Cloud Strategy for Sri Lanka," a transformative initiative designed to propel the nation into a secure, innovative, and globally competitive digital future and “Revised Cloud Policy and Procurement Guidelines for Interim Use”. In today’s world, where cloud computing underpins modern economies, this strategy ensures Sri Lanka harnesses this technology while protecting its national interests and fostering inclusive growth.
Key Objectives of the Cloud Policy/Strategy
- Data Sovereignty and Compliance: Safeguard national data by ensuring it is stored, processed, and governed within Sri Lanka, adhering to local laws.
- Secure and Resilient Infrastructure: Build a robust cloud system with high security, disaster recovery, and protection against cyber threats.
- Hyperscaler Participation: Allow global cloud providers to operate in local environment under strict regulations, ensuring access to advanced technology while prioritizing national security.
- Investment-Friendly Ecosystem: Attract local and foreign investment to boost the digital economy and create jobs.
- Innovation and Public Sector Modernization: Provide a scalable platform to drive digital innovation and improve government services for citizens.
Components of the Policy/Strategy
- Regulatory Oversight: Create a framework for data security, classification, and compliance with international standards like ISO/IEC 27001.
- Public-Private Collaboration: Partner with private entities to manage the cloud under government supervision.
- Open Architecture: Design an interoperable cloud system to integrate various services while maintaining control.
- Tiered Cloud Approach: Manage data based on sensitivity, using sovereign, public, or hybrid models.
- Digital Sovereignty Zones: Establish secure zones within Sri Lanka for critical data.
- Governance Framework: Define roles for institutions like the Ministry of Digital Economy and certify cloud providers.
- Operating Model: Encourage infrastructure investment and create a National Cloud Marketplace for easy access to services.
- Investment and Economic Growth: Offer incentives, promote workforce skills, and support local startups.
- Risk Mitigation: Address risks like data breaches and infrastructure limitations through resilience frameworks.
The ICTA values the perspectives of all stakeholders—industry experts, academia, civil society, and the public—in shaping this strategy. Your feedback will help refine the plan, ensuring it is practical, inclusive, and aligned with global best practices.
We invite you to review the draft and share your comments on:
- The strength of the regulatory framework.
- The practicality of the public-private partnership model.
- The strategy’s impact on local businesses and the economy.
- Ways to enhance data security and privacy.
- Ideas to support innovation and local tech startups.
- Any other areas needing improvement.
Please submit your comments by July 18, 2025 policy@icta.lk. Your contributions will help craft a cloud strategy that empowers Sri Lanka to thrive in the digital age.
Thank you for your engagement and support.