20262030年网络安全合作战略2026

ASEANCYBERSECURITYCOOPERATION

STRATEGY

onevision

oneidentityonecommunity

2026-2030

ASEANCybersecurityCooperationStrategy2026-2030

TheAssociationofSoutheastAsianNations(ASEAN)wasestablishedon8August1967.TheMemberStatesoftheAssociationareBruneiDarussalam,Cambodia,Indonesia,LaoPDR,Malaysia,Myanmar,Philippines,Singapore,Thailand,Timor-Leste,andVietNam.

TheASEANSecretariatisbasedinJakarta,Indonesia.

Author:

ASEANNetworkSecurityActionCouncil

Forinquiries,contact:

TheASEANSecretariat

CommunityRelationsDivision(CRD)

70AJalanSisingamangarajaJakarta12110Indonesia

Phone:(+6221)724-3372,726-2991

Fax:(+6221)739-8234,724-3504

E-mail:

public@

ASEANCybersecurityCooperationStrategy2026–2030

Jakarta,ASEANSecretariat,April2026

338.92

1.ASEAN-Economic–Cybersecurity

2.DataProtection-DigitalEconomy

ASEAN:ACommunityofOpportunitiesforAllThetextofthispublicationmaybefreelyquotedorreprinted,providedproperacknowledgementisgivenandacopycontainingthereprintedmaterialissenttotheCommunityRelationsDivision(CRD)oftheASEANSecretariat,Jakarta.

GeneralinformationonASEANappearsonlineattheASEANWebsite:

.

CopyrightAssociationofSoutheastAsianNations(ASEAN)2026.

Allrightsreserved.

ASEANCybersecurityCooperationStrategy2026–2030

TheASEANSecretariat

2026

Contents

Glossaryofabbreviations 5

1.CybersecurityinASEAN 7

1.1.Adecadeofcooperation 7

1.2.Institutionaldevelopments 7

Figure1onregionalmechanismsoncybersecurity 8

1.3.Nationalpolicydevelopmenttoprotectcriticalinformationinfrastructureanddigital

security 8

Table1:NationalpolicydevelopmentsinAMS 9

1.4.Internationalsummitsandimpactonregionalcybersecurity 9

2.KeyachievementsofACCS2021–2025 10

Figure2:AchievementofACCS2021–2025dimensions,focusareasandinitiatives(asofJune

2025) 11

3.ASEANandthecybersecuritylandscape 13

3.1.ASEAN’sdigitaltransformation 13

3.2.Cybersecuritylandscape 14

3.3.OperationalTechnology(OT)security 15

3.4.Artificialintelligence 15

3.5.Cloudtechnologies 15

3.6.Databreachesandunauthorisedsystemintrusions 16

3.7.Quantumcomputingandcryptography 16

3.8.Fraudandonlinescams 17

3.9.Ransomware 17

4.ASEANCybersecurityCooperationStrategy2026–2030 18

Dimension1:Strengtheningcyberreadiness 18

Dimension2:Advancingregionalpolicycoordination 22

Dimension3:Embeddingtrustintheecosystem 24

Dimension4:Bolsteringcapacitybuildingforthefuture 27

Dimension5:Synergisingcooperation 30

5.Annex 32

Dimension1:Strengtheningcyberreadiness 32

Dimension2:Advancingregionalpolicycoordination 35

Dimension3:Embeddingtrustintheecosystem 37

Dimension4:Bolsteringcapacitybuildingforthefuture 39

Dimension5:Synergisingcooperation 41

6.References 43

4

5

Glossaryofabbreviations

ACCSASEANCybersecurityCooperationStrategy

ACCSQASEANConsultativeCommitteeforStandardsandQuality

ACICEADMMCybersecurityandInformationCentreofExcellence

ACIDASEANCERTIncidentDrill

ADGMINASEANDigitalMinistersMeeting

ADGSOMASEANDigitalSeniorO仟icialsMeeting

ADGSOM-ATRCASEANDigitalSeniorO仟icialsMeeting-ASEAN

TelecommunicationsRegulatorsCouncilADMASEANDigitalMasterplan

AJCCBCASEAN-JapanCybersecurityCapacityBuildingCentre

AMCCASEANMinisterialConferenceonCybersecurity

ANSACASEANNetworkSecurityActionCouncil

ARFASEANRegionalForum

ASCCEASEAN-SingaporeCybersecurityCentreofExcellence

ASEANCyber-CCASEANCybersecurityCoordinatingCommittee

ATRCASEANTelecommunicationsRegulatorsCouncil

CERTComputerEmergencyResponseTeam

CIICriticalInformationInfrastructure

CSIRTComputerSecurityIncidentResponseTeam

DEFADigitalEconomyFrameworkAgreement

DTSC-WGDigitalTradeStandardsandConformanceWorkingGroup

DPDialoguePartners

SOMRIWG-IMTSOMRIWorkingGrouponInformation,MediaandTraining

7

1.CybersecurityinASEAN

1.1.Adecadeofcooperation

1.ThefirstASEANCybersecurityCooperationStrategywaselevatedfromtheASEANCyberCapacityProgramme(ACCP)introducedin2016.DevelopedbyASEAN’sNetworkSecurityActionCouncil(ANSAC)

1

,thepioneeringACCScalledforthecreationofasafeandsecurecyberspaceinASEANbystrengtheningcybersecuritycooperationincybersecurityincidentresponse,ComputerEmergencyResponseTeam(CERT)policyandcoordination,andcybersecuritycapacitybuilding.ThiswassucceededbythesecondACCSiterationthatupdatedASEAN’sapproachamidsttheregion’srisingdigitalambitionsimplementedbetween2021to2025.

1.2.Institutionaldevelopments

1.ASEANhaspursuedsignificantinstitutionaldevelopmentstoaddresssafetyandsecurityintheuseofcyber.Figure1illustratesASEAN’ssectoralbodiestaskedwithcybersecuritysuchasthebodiesandworkinggroupsdedicatedtocybersecurity.

2.ANSACundertheASEANDigitalMinistersMeeting(ADGMIN),plans,coordinatesandfacilitatesASEANcooperationactivitiesinthedevelopmentofASEANcybersecuritycapacity,includingwithASEANDialoguePartners.ANSAC’spurviewinthecybersecuritydomainisfocusedon(i)promotingandcoordinatingtheimplementationofallcybersecurity-relatedinitiativesunderASEANDigitalMasterplan,(ii)coordinatingcybersecuritycapacitybuildinginASEAN,(iii)takingtheleadincoordinatingwithASEANDialoguePartnersandinternationalorganisationsoncybersecuritypolicycooperation,includinginformationsharingandcyberhygieneinitiatives,and(iv)exploringthepotentialforcybersecuritycooperationwithotherASEANsectoralbodies.ASEAN’scross-sectoralcybersecuritycoordinationissupportedbyASEANCybersecurityCoordinatingCommittee(ASEANCyber-CC)whichconsistsofASEANSeniorO仟icialsMeetingonTransnationalCrimeWorkingGrouponCyberCrime(SOMTCWGonCC)andASEANSeniorO仟icialsResponsibleforInformationWorkingGrouponInformation,MediaandTraining(SOMRIWG-IMT).ASEANCyber-CCreportstoADGMIN.

3.InstitutionaldevelopmentsforcybersecurityincludethesuccessfuldevelopmentandoperationalisationofASEANRegionalComputerEmergencyResponseTeam(CERT).Withthephysicalfacilitylaunchedatthe9thASEANMinisterialConferenceonCybersecurity(AMCC)inOctober2024,theASEANRegionalCERTwouldserveasafocalpointforregionalcapacitybuilding,informationmanagementandcrisiscommunication.

1

ReferencefromASEAN'sMajorSectoralBodies/Committeewebsite

8

4.Meanwhile,theregionhasalsodevelopedanumberofregionalframeworkstonavigateemergingtechnologiesandevolvingarchitecture.TheseareinclusiveofASEANGuideonArtificialIntelligence(AI)GovernanceandEthics,ASEANFrameworkonDigitalDataGovernanceandtheEnhancedASEANGuidelinesforStrengtheningResilienceandRepairofSubmarineCables.Furthermore,ASEANhasachievedsubstantialconclusionofDigitalEconomyFrameworkAgreement(DEFA)negotiationinOctober2025andremainsontracktofinalisetheagreementby2026,reflectingtheregion’scollectiveaspirationtobuildanopen,inclusive,secure,andinterconnecteddigitaleconomy.

Figure1onregionalmechanismsoncybersecurity

1.3.Nationalpolicydevelopmenttoprotectcriticalinformationinfrastructureanddigitalsecurity

1.RegionalregulatorytrendsareaccompaniedbymaturityinlegislationfortheprotectionofcyberanddigitalsystemsamongAMS.Since2017,amajorityofAMShavedevelopedlawstoprotectCriticalInformationInfrastructure(CII)anddataprotectionillustratedinTable1.

9

Table1:NationalpolicydevelopmentsinAMS

Country

Brunei

Darussalam

Cambodia

Indonesia

LaoPDR

Malaysia

Philippines

Singapore

Thailand

VietNam

ProtectionofCII

CybersecurityActChapter272(Passedin2024)

Draftoncybersecuritylaw(Draftannouncedin2022)

PresidentialRegulationNumber82of

2022onProtectionforVitalInformationInfrastructure(Issuedin2022)

DraftCybersecurityLaw(Presentedon2025,June)

CyberSecurity(Act)2024–Act854(Enforcedin2024)

CriticalInformationInfrastructureProtectionActof2022(Pending

approvalincongress)

Cybersecurity(Amendment)Act2024(Amendedin2024)

Section49oftheCybersecurityAct2019(Passedin2019)

LawonCybersecurity2018(Passedin2018)

NationalCybersecurityStrategy2025

DataProtection

PersonalDataProtectionOrder2025(Passedin2025)

Draftlawonpersonaldataprotection(Releasedin2023)

PersonalDataProtectionLaw,LawNo.2of2022(Passedin2022)

LawonElectronicDataProtection(No.25/NA)(Passedin2017)

PersonalDataProtection(Amendment)Act2024(Amendedin2024)

RepublicAct10173,DataPrivacyActof2012(Passedin2012)

PersonalDataProtection(Appeal)

(Amendment)Regulations2024(Amendedin2024)

PersonalDataProtectionAct,B.E.2562(2019)(Passedin2019)

PersonalDataProtectionLaw(Passedin2025)DecreeNo.13/2023/ND-CPonPersonalDataProtection(Passedin2023)

1.4.Internationalsummitsandimpactonregionalcybersecurity

1.ASEAN’sregionalandinternationalengagementshavestructuredtheregion’sapproachtoresponsiblestatebehaviourinincidentresponseandcrisis.PlatformssuchasASEANRegionalForum(ARF)haveservedasvehiclesforcapacity-buildingandconfidence-buildingmeasures.ProgrammescoverprinciplesofbuildingsecurityinTheUseofICTsinthenationalcontext,protectionofICT-enabledcriticalinfrastructures,establishingARFPointsofContactDirectoryonSecurityofandintheUseofICTs,inadditiontodevelopinganARFTerminologyinthefieldofsecurityofandintheuseofICT.

2.Meanwhile,theUnitedNations(UN)remainavitalarenaofinternationaldiplomaticconversationsoncyberanddigitalgovernance.TheOpen-EndedWorkingGrouponthesecurityofandintheuseofICTs2021–2025(OEWG2021–2025)hadengagedstakeholdersinasystematicandsubstantivemannerwiththeFinalReportacknowledgingtheimportanceofcapacitybuildingandtheneedtocontinueaddressingthediverselandscapeofICTthreats.TheformationofapermanentUNGlobalMechanism,replacingtheOEWG2021–2025,indicatesglobalcommitment

10

forsustaineddialogueonICTsecurityandtheframeworkofresponsiblestatebehaviour.ASEAN’sobservationofdevelopmentsattheUNalsounderpinseffortstostrengthentrustandregionalcybersecurityfoundations.TheseeffortsincludetheASEANRegionalActionPlan(RAP)ontheimplementationoftheNormsofResponsibleStateBehaviourinCyberspace,developedinsupportofUNGAResolution70/237.TheRAPmatrixwasadoptedinNovember2021.Subsequently,anormsimplementationchecklistwascompletedbyASEANinSeptember2024toofferpracticalcybersecuritypracticesthatoperationalisethe11normsofresponsiblestatebehaviour.

2.KeyachievementsofACCS2021–2025

1.TheACCS2021–2025wasendorsedatthe2ndASEANDigitalMinistersMeeting(ADGMIN)inJanuary2022.Constructedinthemidstofthepandemic,ACCS2021–2025acknowledgedthecomplexinterrelationofcyberanddigitalissuesinclusiveofthosecoveringmisinformationanddisinformation.Additionally,withrisingdigitalisationanddependenceondigitalplatformsandservicesduringthepandemicyears,theACCS2021–2025grappledwithincreasingsophisticationofcyberattacksoncriticalinfrastructureandsupplychain.

2.Thestrategyconsistedof5dimensionsinlinewiththeASEANEconomicBlueprintandtheASEANDigitalMasterplan(ADM)2025,8focusareasand

19initiatives.AsofJune2025,theimplementationofallkeyinitiativeshavealreadycommenced,withatotalof17initiativescompletedand2partiallycompleted.

3.ThetwoinitiativesthatremainpartiallycompletedarethedevelopmentofASEANCIIProtectionCoordinationFrameworkandthedevelopmentofregionalsecuritypolicy,procedureandguidelinesforSMARTcityimplementation.UnderthedevelopmentofASEANCIIProtectionCoordinationFramework,workisongoingtocompleteaprojectontheInventoryofCIIIdentificationFrameworksinASEAN,expectedtoconcludeby2025withthePhilippinesastheproponent.Meanwhile,theinitiativeonthedevelopmentofregionalcybersecuritypolicy,procedureandguidelinesforsmartcityimplementationwasrecommendedtobereviewedforfurtherrecommendationaspartoftheASEANCybersecurityCooperationStrategy2026–2030,withcapacitybuildingactivitiesonthistopicalreadyimplementedin2024.

11

Figure2:AchievementofACCS2021–2025dimensions,focusareasandinitiatives(asofJune2025)

Indicator

Achievement

Dimension1:Advancingcyberreadinesscooperation

Focusarea1:CERTcooperation

Initiative1:ASEANRegionalCERTestablishment

Initiative2:ASEANCERTinformationexchangemechanismestablishment

Initiative3:ASEANcybersecuritythreatlandscapeannualreport

Focusarea2:CriticalInformationInfrastructures(CII)protection

Initiative4:DevelopmentofASEANCIIProtectionCoordinationFramework

Partially

completed

Dimension2:Strengtheningregionalcyberpolicycoordination

Focusarea3:Coordinationoncybersecurityandrelateddigitalsecurityissues

Initiative5:TheASEANLeaders’StatementonAdvancingDigitalTransformation

Initiative6:RegionalInternetGovernanceForum(IGF)oncross-jurisdictionalapproachtoonlinecontentregulation

Focusarea4:Normsimplementation

Initiative7:DevelopmentofMatrixforASEANRegionalPlanofAction(RAP)ontheImplementationofNormsofResponsibleStatesBehaviourinCyberspace

Dimension3:Enhancingtrustincyberspace

Focusarea5:Promotinginternationalcybersecuritystandards

Initiative8:DevelopmentofregionalcybersecuritystandardsforIoT

Initiative9:Developmentofregionalcybersecuritypolicy,procedureandguidelinesfor5GandIoTimplementation

Initiative10:Developmentofregionalcybersecuritypolicy,procedureandguidelinesforsmartcityimplementation

Partially

completed

Initiative11:Capacitybuildingactivitiesondigitalinfrastructureproductandsoftwaresecuritytestingandcertification

Focusarea6:Cyberhygieneanddigitalinclusion

Initiative12:ThedevelopmentofcybersecurityawarenessprogrammeforAMS

Initiative13:Developmentofdigitalliteracytrainingmodulesorprogrammes

Dimension4:Regionalcapacitybuilding

Focusarea7:Multi-disciplinary,modular,multi-stakeholderandmeasurableprogrammes

Initiative14:ASEAN-JapanCybersecurityCapacityBuildingCentre’sProgrammes

Initiative15:ASEAN-SingaporeCybersecurityCentreofExcellence’s(ASCCE)programmes

Initiative16:ADMMCybersecurityandInformationCentreofExcellence

Dimension5:Internationalcooperation

Focusarea8:Multilateralengagementwiththedialoguepartners

Initiative17:EngagewithDPsandothercountriesintheregionfor

confidence-buildingmeasures(CBM),includingthroughARFintersessional

12

meetingonsecurityofandintheUseofInformationandCommunicationTechnologies(ARFISMonICTsSecurity)

Initiative18:Establishcoordination/follow-upmechanismforASEANCybersecurityDialogueswithrelatedDPstodiscuss,toensureinclusivityandavoidduplication

Initiative19:ConductCERTtoCERTdialoguesandjointexerciseswithDialoguePartners

4.TheACCS2021–2025fullyestablishestheASEANRegionalCERTandtheCERT’sinformationsharingmechanism.TheASEANRegionalCERTsynergisesstrengthsandexpertiseofAMSnationalCERTstoenhanceeffectivenessofregionalincidentresponsecapabilities.Playingaroleforinformationexchangesandcapacitybuilding,theASEANRegionalCERTpreparestheregionforeffectiveCERT–to–CERTthreatinformationsharing,crisiscoordinationandCERTcapacity-buildingprogram.

5.TheASEAN’sLeadersStatementonAdvancingDigitalTransformationinASEANon26October2021alsoservedasadeclarationofcommitmentforASEAN’spost-pandemiceconomicrecoverywhichwouldbedependentondigitaltransformations.

2

Thestatementemphasisedcooperationandcapacitybuildingincybersecurityespeciallyinthedevelopmentofasecure,resilient,interoperableandrules-basedcyberspace.EffortsshouldencouragepolicycoherenceacrossthesectorswhilestrengtheningASEANcentralityintheregion’scybersecurityarchitectureandenhancingalignmentofregionalcybersecuritypolicy.

6.Furthermore,ASEANhasmadeprogressontheASEANNormsImplementationChecklistandRegionalActionPlan(RAP)matrixonnormsimplementation.TheRAPmatrixadoptedinNovember2021andthechecklistcompletedinSeptember2024identifiedspecificcapacity-buildingactivitiesandpracticalinitiativesthatwouldassistASEANMemberStatesinimplementingthevoluntary-non-bindingnormsofresponsiblestatebehaviourincyberspaceinalignmentwithnationalprioritiesandneeds.

7.TheACCS2021–2025alsosawtheestablishmentofaGuidelineforIoTand5Gcybersecurityimplementation.IoTimplementationstandardswasdiscussedintheASEAN-JapanCybersecurityStandardsworkshopinDecember2024.TheIoTcybersecuritystandardswerediscussedfurtherinawebinaronsecuritylabellingforIoTorganisedbyAJCCBC,Japan'sMICandMETIinDecember2024.Meanwhile,the'CybersecurityStandardsandConformancetoSupportDigitalTradeinASEAN'whitepaperwaspublishedin2023.ThewhitepaperdetailsstandardstofacilitatedigitaltradebetweenASEANandglobalmarketssuchastheUS.Additionally,inthemidstofrisinginterestin5G,theregionpublishedGuidelinesfor5GEcosystemDevelopmentinASEANendorsedinJanuary2022.

2

ASEANLeaders’StatementonAdvancingDigitalTransformationinASEAN.

13

8.EffortsbyregionalinstitutionssuchasAJCCBCandASCCEcultivatedtalentforcybersecurity.AJCCBCinThailandcontinuestobesupportedbyJapanandhastrained2,741officialsasofJuly2025.ASCCEhastrained2,033seniorgovernmentofficialsin69cybercapacitybuildingprogrammesasof2025.TheASEANCyberShieldProjectsupportedbyROKalsoconductedonlineeducationprogrammesandscholarshipexchangesforyouthandstudentstoenhancecyberresilienceinASEAN.Additionally,annualASEANCyberShieldHackingcompetitionandtheCyberSEAGameswereheldtoenhancetalentdevelopment.

9.Theyears2021–2025alsoconvenedmulti-stakeholdereffortstoaddressdisinformationandmisinformationinfodemic.TheRegionalInternetGovernanceForumheldtheASEANForumonTacklingDisinformationandASEANWorkshoponBestPracticesofDigitalTransformationinMedia.Additionally,theVisionStatementbyAMRI-ASEAN2035,DaNangDeclarationandGuidelineonManagementofGovernmentInformationinCombatingFakeNewsandDisinformationintheMediasoughttofuture-proofASEAN’sapproachestomanagetheinformationenvironment,inclusiveoftransformationsbyAI.

10.Between2021to2025,ASEANexpandeditscyberpolicydialogueswithDialoguePartnerstoatotaloffive,withIndiaandAustraliajoiningexistingdialoguepartners;UnitedStates,ChinaandRussia.Tostrengthentransparency,ASEANhadconstructedatermofreferencethatanchorsdialoguesinexchangesratherthanadvocacyofspecificstances.ASEANCyber-CCplaypivotalrolesinfacilitatingCyberPolicyDialoguesandconsolidatingcapacitybuildingefforts.UnderACCS2021–2025,ASEANalsoheldthefirstASEAN-ITUCyberDrillconductedviavideoconferencein2022.

3.ASEANandthecybersecuritylandscape

3.1.ASEAN’sdigitaltransformation

1.ASEAN'sdigitaleconomyisrapidlyexpanding,underpinnedbyitsstatusasthefastest-growinginternetmarketintheworld.ProjectionsestimatethedigitaleconomycouldcontributeuptoUSD1trilliontoregionalGDPandpotentiallydoubletoUSD2trillionwiththesuccessfulimplementationoftheDEFA.3Meanwhile,ASEAN’sinternetisaccessedby72%ofthepopulation

4

,withanestimationof125,000newuserscomingontothe

3

DatafromWorldEconomic'sForumprojecton"DigitalASEAN"

4

DatafromASEANStatisticalYearbook2023,ASEANSecretariat,2023

14

Interneteveryday.5Google-TemasekestimatesASEAN'sgrossmerchandisevalue(GMV)atUSD263billion,withrevenuesreachingUSD89billionin2024.6The2024UNE-GovernmentSurvey7ranksAsiaasthefastest-growingregionfordigitalisationinthepublicsector,andASEANleaders8havereaffirmedtheircommitmenttotheASEANDigitalMasterPlan2025topositionASEANasaleadingdigitalcommunity.Asdigitalisationintheregiongrows,thisalsoaddscomplexitytothecybersecuritylandscape.

2.Sharedinfrastructureandemergingtechnologiesimpacttraditionalcybersecuritypractices.Underseacablesandorbitalcommunicationnetworkshavebeeninstrumentaltodevelopingconnectivityarchitectures.Meanwhile,theASEANPowerGridthatisnecessarytofueldatacentresalsoenablescross-borderelectricitytradewhileincorporatingdigitaltransformationintheenergysector.EmergingtechnologiessuchasAI,IT/OTintegrationandcloudtechnologiesarecatalystsforthedigitalinfrastructure,makingcorechallengessuchassecuringsupplychainsandprotectingcriticalinfrastructure,adynamicenvironment.However,growingtrendsofmaliciousICTactivitydeliberatelyexploitingthevulnerabilityoftechnologieslikeindustrialcontrolsystems(ICS),operationaltechnology(OT),5Gnetworks,theInternetofThings(IoT),datacenters,andcloudcomputingservicesareofgraveconcern.Thesecouldhavewidespreadconsequencesasdigitaltransformationsoccurincommercialandcriticalsectors.

3.2.Cybersecuritylandscape

1.Inanincreasinglyvolatilegeopoliticalclimate,cyberthreatshaveintensifiedandevolvedsignificantly,affectingthecybersecuritylandscape.TheincreasinglikelihoodofICTsbeingusedinconflictsbetweenstatesisamountingconcern.ThisuseofICTsinconflictshavealreadyoccurredindifferentregionsandimpactsbothmilitaryforcesandcivilians.AdisturbingtrendisthecontinuousincreaseinmalicioususeofICTsbystateandnon-stateactors,includingcriminalandterroristgroups.Somenon-stateactorsnowpossessICTcapabilitiesthatwerepreviouslyonlyavailabletostates.Meanwhile,ICTactivitiestargetingCIandCIIcoulddisruptessentialservicesacrossborders.ThesemaliciousICTactivitiescanunderminetrustandconfidencebetweenstates,anddisruptpolitical,electoral,andpublicinstitutions.WhilenewtechnologieslikeAIandQuantumComputingofferdevelopmentopportunities,theseemergingtechnologiesmayalsocreatenewvulnerabilitiesthatthreatactorscanexploit.Therisk,inadditiontoagrowingmarketforICTintrusioncapabilitiesdisseminatedbystatesandnon-stateactorscallstheneedformeaningfulaction.

5

DatafromWorldEconomic'sForumprojecton"DigitalASEAN"

6

Datafrome-ConomySEA2024Report,byGoogle,Temasek,andBain&Company.

7

DatafromUnitedNationsE-GovernmentSurvey,2024

8

Leaders'StatementontheDevelopmentoftheASEANDigitalEconomyFrameworkAgreement(DEFA).

ASEANIndonesia2023

15

3.Theaggregationofdatafromtheuseofnewandemergingtechnologies,includingIoT,AI,cloudcomputing,andquantumcomputinghighlightstheincreasingimportanceofdataprotectionandsecurity.DataisfundamentaltorealisedigitalambitionssuchasAIanditsprotectionamiddigitaltransformationisessential.

3.3.OperationalTechnology(OT)security

1.FurtherintegrationbetweenITandOTenvironmentswillcomplicatetheattacksurface,particularlywhensystemsandtechnologiesarenotregularlyupdatedtoaddressemerginggapsandvulnerabilities.AKasperskyandVDCResearchreportfoundthatamajority(63.6%)ofindustrialorganisationssurveyedareundergoingrapiddigitalisation.However,approximately46.6%ofresearchrespondentsexpressedinadequatesecuritymeasureswithintheirexistinginfrastructurewhile41.7%emphasisedcomplexitiesofIT/OTintegration.9Asconvergenceaccelerates,maintainingrobustOTsecuritywillrequirenotonlytechnicalupgradesbutalsoaworkforceequippedwiththenecessaryskillsandawarenesstorecogniseandrespondtoevolvingthreatseffectively.

3.4.Artificialintelligence

1.AIcouldtransformsystemsandcybersecuritypractices.Whilecontinuingtoencourageinnovation,itisalsonecessarythatAIisadoptedinasafe,secureandresponsiblemanner.Ononehand,AIcanidentifyandaddressthreatsmorequickly,accuratelyandefficiently.Ontheotherhand,AIcanalsobemisusedtodevelopsophisticatedcyberandsocialengineeringattacks.InasurveybyCloudflarecoveringAsiaPacific,halfoftherespondentsanticipatethatAIwillbeleveragedtocrackpasswordsorencryptioncodes,whereas47%believeitwillenhancephishingandsocialengineeringattacks.10AnincreaseinrelianceanddependenceonAIforcybersecuritycouldintroducevulnerabilitieswhilejailbrokenGenerativeAItoolscouldresultindatabreaches,misinformationandproductivitychallenges.Theriskisfurtherexacerbatedbytheshorta