Cyber Security in Nepal: Navigating a Digital Battlefield

As Nepal continues its rapid digital transformation, cybersecurity has emerged as a critical challenge for government institutions, businesses, and individual users alike. Recent incidents—from sophisticated cyber-attacks on government systems to policy measures addressing online fraud—underscore the urgent need to bolster digital defenses and raise public awareness about cyber threats.

Recent Developments in Nepal's Cyber Landscape

Over the past year, Nepal has witnessed a surge in cybercrime and a flurry of government initiatives aimed at mitigating these risks. For example, The Kathmandu Post reported a dramatic rise in cybercrime cases—from 9,013 cases in one fiscal year to 19,730 in the following year—revealing that the country is struggling to keep pace with emerging digital threats (The Kathmandu Post, 2024).

Simultaneously, the government has taken proactive measures to secure its digital infrastructure. A 102-point advisory was issued to safeguard government websites, data, and networks, emphasizing regular system updates, data backups, and strict password policies (TRN Online, 2025). In another significant step, authorities recently lifted the TikTok ban after the app agreed to collaborate with Nepalese law enforcement to address cybercrime concerns, reflecting an evolving regulatory approach to digital platforms (Reuters, 2024).

Cybercrime: Statistics and Notable Incidents

The mounting threat of cybercrime in Nepal is not only reflected in the rising numbers but also in the complexity of the incidents. Recent reports indicate that:

• Cybercrime cases nearly doubled in one fiscal cycle, highlighting vulnerabilities in both the public and private sectors (The Kathmandu Post, 2024).
• Government systems have repeatedly fallen prey to cyber-attacks, with multiple incidents of malware and data breaches exposing weak defensive structures (Onlinekhabar, 2025).

These incidents not only disrupt critical services but also erode public confidence in Nepal’s ability to protect sensitive digital information.

Challenges and Infrastructure Weaknesses

Despite these efforts, significant challenges remain:

• Vendor Dependency and Resource Constraints: Many government systems are managed by external contractors who often withhold source codes and limit transparency. This dependency, coupled with an understaffed cybersecurity workforce, makes it difficult for agencies to maintain control over their digital assets (Onlinekhabar, 2025).
• Inadequate Policy Framework: While advisories and guidelines have been issued, Nepal still lacks a comprehensive cybersecurity policy that addresses all dimensions of cyber threats. The absence of regular security audits and advanced investigative tools further exacerbates the vulnerability of critical systems (London Daily News, 2024).

The combined effect of these challenges leaves Nepal’s digital infrastructure exposed to both internal mismanagement and sophisticated external attacks.

Policy Responses and Future Directions

To secure its digital future, Nepal must adopt a multi-pronged strategy:

• Enhanced Public Awareness and Training: Educating employees and citizens about safe online practices is fundamental. Regular cybersecurity training and awareness campaigns can significantly reduce risks stemming from human error.
• Strengthening Regulatory Frameworks: Comprehensive cybersecurity policies, aligned with international standards, are essential. This includes mandating regular security audits, updating technological infrastructure, and enforcing strict penalties for cybercrimes.
• Investment in Advanced Technologies: Adoption of next-generation security solutions—such as intrusion detection systems, multi-factor authentication, and advanced encryption—can help create a more resilient digital environment.
• Fostering International Collaboration: Cyber threats are global. By collaborating with international experts and organizations, Nepal can adopt best practices and access sophisticated security resources, further bolstering its defenses (London Daily News, 2024).

Conclusion

Cybersecurity in Nepal stands at a crossroads. While recent initiatives—such as government advisories and regulatory adjustments—are steps in the right direction, the ongoing surge in cybercrime and repeated system breaches indicate that much remains to be done. Addressing these challenges requires a concerted effort from government agencies, private organizations, and the general public alike. Only through coordinated action and sustained investment in cybersecurity infrastructure can Nepal hope to secure its digital future and safeguard its citizens from the evolving threats of the digital age.

---

References

London Daily News. (2024). Cyber security in Nepal: Prepared to face the challenges of digital future? [Online]. Available at: https://www.londondaily.news/cyber-security-in-nepal-prepared-to-face-the-challenges-of-digital-future/ [Accessed 11 February 2025].

Onlinekhabar. (2025). Repeated cyber-attacks reveal weak government defences. [Online]. Available at: https://english.onlinekhabar.com/repeated-cyber-attacks-reveal-weak-government-defences.html [Accessed 11 February 2025].

Reuters. (2024). Nepal lifts TikTok ban after app addresses cyber crime concerns. [Online]. Available at: https://www.reuters.com/world/asia-pacific/nepal-lifts-tiktok-ban-after-app-addresses-cyber-crime-concerns-2024-08-22/ [Accessed 11 February 2025].

The Kathmandu Post. (2024). Cybercrime cases spike in Nepal. [Online]. Available at: https://kathmandupost.com/national/2024/08/21/cybercrime-cases-spike-in-nepal [Accessed 11 February 2025].

TRN Online. (2025). 102-point advisory issued for government website, data and network security. [Online]. Available at: https://risingnepaldaily.com/news/56092 [Accessed 11 February 2025].