The arrest of former Director of the State Intelligence Service (SIS), Major General (Retd.) Tuan Suresh Salley, has reignited one of the most uncomfortable and unresolved questions haunting Sri Lanka since the devastating Easter Sunday attacks of April 2019. Did the Sri Lankan state simply fail to prevent a catastrophic act of terrorism, or did elements embedded deep within state institutions actively enable, guide, or manipulate the events that unfolded? Salley's arrest has thrust this question back into the national spotlight, forcing citizens, policymakers, and analysts to confront the deeply troubling concept of a "State behind the State" — a shadow architecture of power that operates beyond democratic accountability and public scrutiny.
Understanding the "State Behind the State"
The concept of a state within a state, sometimes referred to as a "deep state," is not unique to Sri Lanka. It describes a network of entrenched political actors, military officials, intelligence operatives, and bureaucratic power brokers who pursue their own institutional or factional interests, often at the direct expense of genuine national security. In Sri Lanka's context, this phenomenon carries particularly grave implications. The country endured nearly three decades of civil war, during which intelligence services accumulated extraordinary powers with minimal oversight. When the war ended in 2009, those structures did not dissolve — they adapted, pivoting from counterterrorism mandates toward political surveillance, electoral manipulation, and the protection of powerful interests rather than the protection of citizens.
Salley's tenure as SIS Director places him at the very center of these overlapping worlds. His arrest signals that investigative authorities are, at least on the surface, willing to pursue accountability at the highest levels of the intelligence establishment. However, the circumstances surrounding his detention raise as many questions as they answer. Is this a genuine reckoning with institutional failure, or is it itself a politically motivated act — using the machinery of justice to neutralize a figure who knows too much about too many people in power?
National Security vs. Political Security: A Critical Distinction
At the heart of this controversy lies a fundamental distinction that Sri Lanka's political class has consistently blurred: the difference between national security and political security. National security, in its truest sense, exists to protect citizens from external threats, terrorism, espionage, and large-scale violence. It is a public good, grounded in constitutional mandates and accountable to democratic institutions. Political security, by contrast, is the protection of those currently holding power — their positions, their interests, and their freedom from scrutiny. When intelligence services are redirected from the former to serve the latter, the consequences are catastrophic.
The Easter Sunday bombings exposed this dangerous inversion with brutal clarity. Prior intelligence warnings about the planned attacks were reportedly suppressed, ignored, or failed to travel through proper institutional channels. Whether this failure was the result of incompetence, deliberate obstruction, or factional infighting within the security apparatus remains a matter of fierce debate. What is undeniable is that 269 people lost their lives on that morning, and the accountability process has been painfully slow, politically shaped, and deeply unsatisfying for the victims' families and the broader public.
The Institutional Rot and Its Political Enablers
Salley's arrest cannot be understood in isolation. It must be read against the backdrop of a political culture in Sri Lanka that has historically weaponized intelligence institutions for partisan purposes. Successive governments have used the SIS and related agencies to monitor political opponents, suppress dissent, and manage electoral outcomes. In this environment, the line between a security official and a political operative becomes dangerously thin. Officials who accumulate sensitive information about political figures gain enormous informal power — power that can protect them from prosecution, or alternatively, make them targets when political winds shift.
This dynamic creates a perverse incentive structure. Intelligence officials are rewarded not for protecting citizens but for protecting patrons. National security becomes a rhetorical shield, invoked loudly whenever institutional accountability is demanded, and quietly set aside whenever political interests require it. The result is an intelligence community that is simultaneously over-empowered and under-accountable — a combination that is toxic in any democracy.
What Justice Demands Now
For Sri Lanka to move beyond this cycle, Salley's arrest must be the beginning of a genuinely independent judicial process, not a politically convenient endpoint. The investigation must be allowed to follow evidence wherever it leads — including toward sitting and former political figures who may have directed, benefited from, or deliberately ignored intelligence failures. Parliamentary oversight of intelligence services must be strengthened through transparent legislative reform. And the families of Easter Sunday victims deserve a full, unobstructed accounting of exactly what was known, by whom, and when.
The arrest of one former intelligence chief, however significant, does not dismantle a deep state. It merely illuminates its existence. Sri Lanka now faces a defining choice: pursue genuine accountability and rebuild the integrity of its national security institutions, or allow political security to once again consume the space where real justice should stand. The nation's democratic future may well depend on which path it chooses.