"One can find servers running older and vulnerable versions of software, poor server management, web applications deployed on these servers being designed and implemented by programmers who lack awareness of secure coding practices," the study by Information Security Consortium (Infosac) said.

However, private sector is much more cautious and alert when it comes to their IT infrastructure compared to the government, it said.

The study also highlighted sophisticated cyber attacks, possibly from neighbouring China, aimed at stealing critical information from government organisation and large corporate houses.