ASEAN is nothing like the EU:
""largely because of the inherent absence of a power to legislate or veto budgets and appointments"
It does not have a legislature - it is just an intergovernmental organisation. The EU is unique in having a legislature, courts and a national budget and not regarding itself as a country.
Sri Lanka is NOT a member of ASEAN. You might be confusing it with SAARC - which is also just an intergovernmental organisation.
Sri Lanka is doing pretty well considering the recent recent economic crisis. The biggest problem is getting people fed and clothed. Everyone there except the very rich have lowered their standard of living significantly.
Its scores are not bad. 5/6 for military cyber operations (so that civil war did some good) and 6/9 for fight against cyber crime (sounds better than general policing there). That is as well as the 9/9 for education already mentioned.
From the linked article:
"The Cyber Security Act is supposed to secure individual and organisational data in the public and commercial sectors, as well as execute activities such as website security. There will be no social media censorship without it. Social media users are sometimes interested in this as well,” said Herath. "
Another country introducing more censorship. Just what we need. Better than the days of white van disappearances I suppose.