By Our Reporter
Nepal is rapidly becoming digital without becoming equally secure. Banking, share trading, government procurement, tax payments, passports and many everyday services now depend on computers and online networks. That transition has made life easier, but it has also created vulnerabilities that the country is poorly prepared to handle.
The recent cyberattack on the data centre supporting Nepal’s capital market and the hacking of the government’s E-bidding system showed how quickly a digital security problem can become an economic problem. Trading was disrupted because systems used by dozens of brokers were affected. Earlier, the electronic government procurement system was breached, with allegations that tender information was manipulated. Add to these the frequent cases of hacked social media accounts, phishing, online fraud and stolen banking credentials, and a clear pattern emerges: cybersecurity is no longer simply an IT department’s problem.
For Nepal, the danger is particularly serious because digital adoption has moved faster than institutional capacity.
Banks are an obvious target. People increasingly use mobile banking, digital wallets, online transfers and QR payments. A major attack on a bank could expose customer information, interrupt transactions and, in an extreme case, create panic among depositors. Even when money is not stolen, the loss of public confidence can inflict enormous damage.
Government systems carry an equally serious risk. Consider what could happen if attackers gained control of tax records, citizenship databases, passport information, land records or government payment systems. They could steal information, alter records, demand ransom or simply disable essential services.
Nepal cannot protect itself by buying expensive software alone. Cybersecurity is a continuous process, not a product that can be installed once and forgotten.
The first requirement is to identify systems whose failure would seriously affect the country. Banking networks, payment systems, telecom infrastructure, electricity, airports, government databases and capital markets should be treated as critical national infrastructure. They require stricter security standards than ordinary websites.
Banks and government agencies also need regular independent security audits. Systems should be tested for weaknesses before criminals find them. Software must be updated promptly, access to sensitive networks restricted, and multi factor authentication made compulsory for important systems.
Equally important is backup. Essential information should have several secure backups, including copies separated from the main network. If ransomware disables one system, institutions should be capable of restoring operations without paying criminals.
Nepal also needs a stronger national cyber response mechanism operating around the clock. When an attack begins, hours matter. Specialists should be able to identify the threat, isolate infected networks, preserve evidence and coordinate with banks, telecom operators, police and government agencies.
The biggest challenge may be skilled manpower. Nepal cannot compete with sophisticated hackers using poorly trained teams and outdated equipment. Universities should expand cybersecurity courses, while government institutions should offer competitive salaries to retain specialists. Police investigators, civil servants and bank employees need regular training as well.
Ordinary citizens form another line of defence. Many attacks succeed not by defeating sophisticated technology but by fooling people into revealing passwords, clicking malicious links or sharing OTP or one-time passwords. Digital literacy therefore needs to become part of public education.
Finally, institutions must report serious cyber incidents instead of hiding them to protect their reputation. Concealment prevents others from learning about emerging threats.
Nepal may lag behind technologically, but that does not mean it must remain defenceless. It needs to spend wisely, train people, protect critical systems and prepare for attacks before they happen. As more of the economy moves online, cybersecurity becomes as much about protecting people, money and national institutions as protecting computers.
Login to add a comment