The Maldives is preparing to establish a National Cyber Security Operation Centre before the end of the year, as part of ongoing efforts to strengthen the country’s digital infrastructure and protect its cyber landscape. The move signals a significant shift in the state’s approach to cyber threats, particularly in the public sector, which has long lacked a unified legal framework for cyber security.
The centre is being developed under the direction of the National Cyber Security Agency (NCSA), which was formed in March 2024 under a presidential decree and operates within the Ministry of Interior. Since its inception, the NCSA has emerged as the central authority overseeing cyber security policy, incident coordination, and the development of national standards.
According to information shared in a recent interview aired on state media, one of the core mandates of the NCSA is to support public institutions in strengthening their cyber defence capabilities. This includes not only formulating national policies and guidelines, but also actively working with global partners to adopt international best practices.
A critical vulnerability identified by the agency is the lack of consistent cyber security standards across public sector institutions. In response, the NCSA has drafted a new cyber security law in consultation with international technical bodies. The proposed legislation, now submitted to the Attorney General’s Office, would introduce legally binding measures requiring public entities to adopt standardised cyber security protocols and report threats directly to the agency.
The law would also enforce routine cyber security audits and penetration testing for critical infrastructure — practices currently limited to a small number of state bodies. Once enacted, the legal framework is expected to empower the NCSA with the authority to conduct system monitoring and require public institutions to integrate their cyber infrastructure with the agency’s monitoring systems.
At the centre of these reforms is the soon-to-be-launched National Cyber Security Operation Centre. Once operational, it will serve as the primary hub for coordinating responses to cyber attacks and managing threat intelligence feeds from both domestic and international sources. The system is expected to integrate real-time threat intelligence from major global technology firms, offering unprecedented visibility into potential threats targeting the Maldives.
The operation centre is projected to handle the majority of cyber incidents facing the public sector and will enable the government to respond more swiftly and effectively to emerging threats. The initiative aligns with recent legislative developments that criminalise cyber offences and reinforce the state’s commitment to digital safety.
The Maldives’ efforts to modernise its cyber security framework reflect an increasing recognition of the risks posed by an expanding digital footprint. With the implementation of these systems, the country aims to build a more secure digital environment for both state institutions and the public.
