Cyber Defense Initiative Conference 2022

ASEAN-Japan Cybersecurity
Cooperation and Human ResourceDevelopment Program
Office for STI & DX
Governance and Peacebuilding Department
Japan International Cooperation Agency (JICA)
10th November 2022

Outline
1. JICA
2. Global Agenda
3. DX & Cybersecurity Strategy
4. Cybersecurity Cooperation– Indonesia– Viet Nam– Cambodia– Training in Japan– Thailand (AJCCBC)
独立行政法人 国際協力機構｜Japan International Cooperation Agency

2

Japan International Cooperation Agency

Leading the World with TrustJICA, with its partners, will take the lead in forging bonds oftrust across the world, aspiring for a free, peaceful andprosperous world where people can hope for a better futureand explore their diverse potentials.

独立行政法人 国際協力機構｜Japan International Cooperation Agency

Japan International Cooperation Agency (jica.go.jp)
3

JICA Global Network and Operation

1,500 + P R O J E C T S

16.5 billion U S DPeople

13,217 Tr a i n e d

150

Countries& regionsin operation

9,163
96

1,929

Overseas
offices

Experts andVo l u n t e e r s

14Domestic
offices

Staffmembers* Approximately 16.5 billion USD with the exchange rate as ofMarch 2020

独立行政法人 国際協力機構｜Japan International Cooperation Agency

4

JICA Mission
Human Security

Quality Growth

Fostering societies where all thepeople can protect themselvesfrom various threats and lead theirlives in security and with dignity

Promoting sustainable growthwith less disparity and withoutharming environment

Societies where all can
live healthy, safe lives

Peaceful, just societies
without fear and violence

独立行政法人 国際協力機構｜Japan International Cooperation Agency

Prosperous, sustainableeconomies at harmony
with nature

Care for the Planet5

Global Agenda◼JICA’s cooperation strategies for global issues, stating
priorities, targets, and approaches towards the achievementof SDGs
◼Maximizing development impacts on the global issues throughfurther strengthening partnership among diverse actors totackle complex challenges the world faces.

独立行政法人 国際協力機構｜Japan International Cooperation Agency

6

Global Agenda
1. Urban and Regional Development
2. Transportation
Prosperity
3. Energy and Mining
4. Private Sector Development
5. Agriculture and Rural Development

PeoplePeacePlanet

6. Health
7. Improving Nutrition
8. Education
9. Social Security and Development
10. Sport and Development
11. Peacebuilding
12. Governance
13. Public Finance and Financial Systems
14. Gender Equality and Women's Empowerment
15. Digital for Development
16. Climate Change
17. Nature Conservation
18. Environmental Management
19. Sustainable Water Resources Management and Water Supply
20. Disaster Risk Reduction through Pre-disaster Investment and Build Back Better

独立行政法人 国際協力機構｜Japan International Cooperation Agency

7

Global Agenda
JICA Global Agenda
JICA’s 20 Strategies for Global
Development Issues

15 Digital for Development

NO.

DX to ImproveWell-being for All
Aiming for a resilient society
ensuring people’s safety,
diverse opportunities
and well-being with digitaltechnology.

独立行政法人 国際協力機構｜Japan International Cooperation Agency

8Global Agenda
ISSUES

What are the current challenges?

LDCs have big potentials
to reap the benefits of global digitalization
GlobalDX Market has

Annual Growth of16 %Smartphone

Globalpenetration

will increase
To
独立行政法人 国際協力機構｜Japan International Cooperation Agency

65% in 2016

80% in 2025
9

Global Agenda
ISSUES

What are the current challenges?

The Digital Divide andthe Cyber Security are Serious Threats.

3.3 billion people
still have no access tothe Internet

Cybercrime causes$1 trillionof damages per year
独立行政法人 国際協力機構｜Japan International Cooperation Agency

10

JICA Approach on Digital Transformation (DX)Goals

Focus Areas

Innovation
Ecosystems

Driving DX across theSectors

Harness digitaltechnologies andcreate innovation
ecosystems to solve
social issues.

DX Challenges /DLeads
Launch quick-win DX use
cases for JICA ODA projects
and promote the long-run DX
mainstreaming in target
sectors and regions.
Health care
Disaster Prev.

Enabling
Environments
Develop infrastructure
to promote thebenefits of digitization
and reduce disparities
and cybersecurity
risks.
独立行政法人 国際協力機構｜Japan International Cooperation Agency

Basic Infrastructure forFree & Secure Digital Economy
ICT/DigitalDigital Skills
Infrastructure and BusinessCybersecurity

GovTechMobility

AgriTech

Cybersecurity
Capacity building on
cybersecurity especially Asia
Region countries by referring
Data Free Flow with Trust(DFFT) concept.
11

Cybersecurity Cooperation Strategy➢In order to promote digitalization in developing countries, it isessential to realize a free and secure digital society, which isthe basis of digitalization.
➢From the perspective of Japan's security as well, Japan isexpanding assistance with cyber security as a priority area.
➢Mainly, (1) cooperation focused on improving the capacity of
the national CSIRT, which serves as the base, (2) cooperationthat contributes to human resource development in thepartner country, and (3) literacy improvement, such as training
and enlightenment activities for public institutions, including
critical infrastructure operators.
Disclaimer: The representations on the map are for illustrative purposes only and do not represent JICA's views on
the legal status, borders and demarcations thereof, or geographical names in any country or region.
独立行政法人 国際協力機構｜Japan International Cooperation Agency

12

Technical Cooperation Projects (Bilateral Cooperation）
ASEAN:

ASEAN-Japan Capacity Building Program for Cybersecurity
and Trusted Digital Services
Indonesia: Human Resource Development for CS Professionals
Vietnam:Capacity Building for Cyber Security
Cambodia: Improvement of Cyber Resilience
Malaysia:
5G and Cybersecurity Training
Mongolia:
Development of HR in Cybersecurity
Bangladesh: Capacity Development on Cyber Security
Kirgizstan: Strengthening Capacity of Cybersecurity
Armenia:
Cybersecurity Training

Training in Japan- Defense Practice Against Cyber Attacks- International Law and Policy Formation for Enhancement of Cybersecurity
Disclaimer: The representations on the map are for illustrative purposes only and do not represent JICA's viewson the legal status, borders and demarcations thereof, or geographical names in any country or region.
独立行政法人 国際協力機構｜Japan International Cooperation Agency

13

Global Cybersecurity Index (GCI)
Ranking among 193 + 1 countries

2020

Legal
Technical
Organization
Capacity
Building

Cooperative
https://www.itu.int/en/ITU-D/Cybersecurity/Pages/global-cybersecurity-index.aspx
独立行政法人 国際協力機構｜Japan International Cooperation Agency

2018

2017

US

1

2

2

Korea

415

13

Singapore46

1

Malaysia

583Japan714

11

Indonesia

24

41

70

Viet Nam

2550

101

Thailand

44

35

20

Philippines

615837Brunei

856453Myanmar99

12899

Lao13112077

Cambodia

13213192
14

Cooperation for Cyber Security
Stage

InitialGrowinginterest

Networking

Self-sustaining

LegalOrganization(Strategy)

Pillars

TechnicalCapacity
Building

Cooperation

独立行政法人 国際協力機構｜Japan International Cooperation Agency

15

Cybersecurity Cooperation- Indonesia- Viet Nam- Cambodia- Training in Japan- Thailand (ASEAN)

Indonesia

Human Resources Development for Cyber
Security Professionals in Indonesia• Period: 2019.6- 2024.6 （5 years）• Implementation agency– University of Indonesia (UI)– Ministry of Communication and Information Technology

Project purposeCyber security (CS) professionals demanded by the Indonesian ICTentities are developed in University of Indonesia (UI)
Output1

Output2

Output3

Output4

CS short
courses areheld by UI(Master degreelevel)

Open source
CS tools are
localized ordevelopedOpen
courseware in
CS is developed
and opened topublicA network for
CS entities
among theworld isstrengthened

Commercial Academy
Course, Customized
hands-on training etc.
独立行政法人 国際協力機構｜Japan International Cooperation Agency

Provide training to neighborCountries （CLMV,TL）
17

Indonesia

Human Resources Development for Cyber
Security Professionals in IndonesiaCourse objective• Learn how to make decision makers understand the importance ofcybersecurity

CIO, CISO, IT dev. head(Course participants)

CEO, CFO etc.

• Course contents– CEO’s way of thinking, Impact ofincidents to 、Profit & Loss
Statement, Balance Sheet andstock price– Cyber incident response exercise
using movie, Risk management– Effective reporting andpresentation technique
独立行政法人 国際協力機構｜Japan International Cooperation Agency

18

Viet Nam

Capacity Building for Cybersecurity in Viet Nam

Overall Goal

Cyber Resilience for Vietnamese Government isIncreased

Project Purpose

Capacity of AIS for Cybersecurity is Enhanced

Training

Equipment

Task

Materials forAwarenessRaisingRole
Career Development
PlanSkillRole : Incident Handler
Current skill: 〇〇〇, ◇◇◇19

Required skill: △△△, □□□Abilityrange
独立行政法人 国際協力機構｜Japan International Cooperation Agency

Required training: Couse B, D
Training schedule

19

Viet Nam

Capacity Building for Cybersecurity in Viet Nam

Security Training

A total of about 654 people were trained, contributing to thedevelopment of cyber security professionals within theVietnamese government.
Individual 144 people, Total 87 course,
Ratio of who passed the international certification exam totrainees: 57.7 %Ratio of who passed the international certification exam toexaminees: 77.4 %独立行政法人 国際協力機構｜Japan International Cooperation Agency

20Viet Nam

Human Resource Development Framework

Security Body of Knowledge (SecBoK)

Security roles

Knowledge, Skill, Ability
独立行政法人 国際協力機構｜Japan International Cooperation Agency

21

Viet Nam

Human Resource Development Framework

Security Roles and Course Mapping

独立行政法人 国際協力機構｜Japan International Cooperation Agency

22

Viet Nam

Building and Operation of Cyber Exercise

独立行政法人 国際協力機構｜Japan International Cooperation Agency

23

Viet Nam

Awareness Raising Materials Development

1. Animation videos for Child Online Protection

https://www.youtube.com/channel/UCz39i69Rz9nbqzffczICqsw

2. COP portal website

3. Branding kit

https://vn-cop.vn/
独立行政法人 国際協力機構｜Japan International Cooperation Agency

24

Improvement for Cyber Resilience

Cambodia

Policies, Strategy, Laws, Regulations and Standards etc.
Output 3
Necessary cybersecurity
policies, standards, andlaws etc. are identified

Enactment

Incident
Response

Ministry
Security related
Department

Other governmentalorganizations
Awareness

JICA side
Information Sharing

Monitoring

Critical Infrastructure

Awareness

Output 1
Capacity to provide CSIRT services is improved

Private Enterprises
Nations

Output 2 Activities for strengthening cybersecurity of related organizations(other ministries, CII operators, etc.) will be enhanced
独立行政法人 国際協力機構｜Japan International Cooperation Agency

25Thailand

ASEAN Japan Cybersecurity Capacity Building Center

AJCCBCThe ASEAN-Japan Cybersecurity Capacity Building Centre (AJCCBC) wasestablished under the guidance of TELMIN/SOM in 2018 and funded by
Japan ASEAN Integration Fund (JAIF 2.0) with the aim to develop acybersecurity workforce of 700+ over 4 years to enhance the capacity ofcybersecurity experts and specialists in the ASEAN Member States (AMS)
by providing trainings and other activities to participants from AMS.

独立行政法人 国際協力機構｜Japan International Cooperation Agency

26

AJCCBC – 3 days training program

独立行政法人 国際協力機構｜Japan International Cooperation Agency

27

AJCCBC – Cyber SEA Game

独立行政法人 国際協力機構｜Japan International Cooperation Agency

28

10

Score (0-10)

Training Improvement

ASEAN Member States - Improvement8642.72%

6.11


7.85
34.52%


7.97
39.65%

5.14

4.81

MalwareAnalysis

NetworkForensics

42

3.5

The comparison between
pre-test and post-testsuggests that the capacityof the personnel wasremarkably enhanced.

0Incident
Response

POST-TEST

Cyber SEA GameChampionsPRE-TEST

独立行政法人 国際協力機構｜Japan International Cooperation Agency

29

Result of Survey in 2021
The most required 3 cybersecurity skills are Threat Intelligence
analysis, Penetration testing, and Security analysis.
(According to the survey in 2021 among 76 AJCCBC alumni)

独立行政法人 国際協力機構｜Japan International Cooperation Agency

30

ASEAN Capacity Building Program
Major Activities• Hands-on Training for ASEAN

01

Cybersecurity Professionals will
be held 6times every year• E.g., CYDER exercises, NetworkForensics, Malware Analysis,Trusted Digital Services course

02• Cyber SEA Game (ASEAN YouthCybersecurity TechnicalChallenge) will be held once timea year
• Winner will be invited to theSECCON final match held inJapan

Period: Mar. 2023 - Feb. 2027
Target: ASEAN member states
独立行政法人 国際協力機構｜Japan International Cooperation Agency

03• Seminar, Hands-on or Selflearning Cybersecurityrelated course with 3rdparties• Research activities
31

ASEAN Capacity Building Program01• Hands-on Training
02• Cyber SEA Game03• Seminar, Hands-on• Research activities

Looking for possible partnerships with private sectors for ASEAN
1. Potential partners in Thailand who could provide;▪ Cybersecurity training courses▪ Other related services or training courses, seminars, webinars, etc.
▪ Data collection survey
2. General cybersecurity market outlook in Thailand and ASEAN.
3. Potential partners who could provide cybersecurity
training/seminar/webinar in Cambodia, Philippines, or other countries inASEAN and Asia.
独立行政法人 国際協力機構｜Japan International Cooperation Agency

32

JICA, Office for STI and DXYAMAZAKI Hiroto (yamazaki.hiroto3@jica.go.jp)

JICA DX website
https://www.jica.go.jp/activities/issues/digital/jicadx/index.html

JICA Channel
https://www.youtube.com/user/jicachannel1