Enhancing the GovernmentIndustry-Academia Collaborationfrom Thailand to ASEAN
November 8th, 2022
DEGUCHI Satoshi (Sato)
Deputy Counsellor for International StrategyNISC, Japan

Have you ever seen this logo ?

1

Do you know what is AJCCBC ?

2

Issues and Direction of Japan’s Cybersecurity Strategy 2021
Japan in the 2020s: Era of the “new normal” and the digital society Digital economy
 Digital transformation (DX) Growing severity of thenational securityenvironment COVID-19
 Remote working, online education, etc.

 Expectations for the contribution ofdigital technology to SDGs

 Tokyo Olympic/Paralympic
GamesIssues in cyberspace: Inclusion of all the people in cyberspace
 Cyberspace is becoming a public space where all entities participate
 Interconnections and interrelationships across cyber and physical boundaries
are becoming deeper These changes increase vulnerabilities that attackers can exploit Cyberspace reflects
geopolitical tensions
 Interstate competition National security issues

 Concerns about rifts
between nations and thesuppression of human rights

 Utilizing public and private
initiatives

Cybersecurity has become an issue for all entities
Japan’s Commitment to the five basic principles*“Cybersecurity for All”
Cybersecurity which leaves no-one behind

Advancing DX and cybersecurity
simultaneously

Enhancing initiatives fromthe perspective of national security

Ensuring the overall safety and security of cyberspace
as it becomes increasingly public, interconnected and interrelated

Ensuring “a free, fair and secure cyberspace”* Assuring the free flow of information, the rule of law, openness, autonomy, and collaboration among multi-stakeholders

3Basic Policy on Cybersecurity Capacity Building Support for Developing Countries(Dec. 14, 2021 Approved by the Cybersecurity Strategic Headquarters)

In December 2021, the government of Japan decided on the Basic Policy on Cybersecurity
Capacity Building Support for Developing Countries.
While the Japanese government has continued to provide the support to the governmentsof ASEAN countries, Japan will strengthen the support to the private sector, including
critical infrastructure providers, through government-industry-academia collaboration.
Importance of support
1. Reducing international
cybersecurity vulnerabilities andrisks.
2. Ensuring the stability of the livesof residents and the activities ofcompanies in recipient countries.
3. Obtaining general understandingof the basic principles ofassurance of the free flow of
information and the rule of law.
4. Developing a foundation forJapan’s industry to operate
locally.
5. Contributing to thereinforcement of government
policies.
(Free and Open Indo-Pacific,etc.)

Approaches
1. Support for ensuring cyber hygiene through the protection of criticalinfrastructure and other means

 enhancing support for critical infrastructure, an area where there are growing needs forsupporting measures in each country based on the relationship.
 expanding the scope of support in the Indo-Pacific region based on past achievements andexperiences in capacity building support in the ASEAN region.

2. Support for measures against cybercrimes

 providing training related to criminal justice in collaboration with the United Nations andothers.

3. Sharing understanding and cyber situational awareness of internationalrules and confidence building measures enhancing capacity building support on application of international law and the norms.
 securing capabilities for acting responsible State behavior in cyberspace, through efforts bymulti-stakeholders including private companies, academia, and technical communities.

4. Human resources development and other cross-sectoral areas

 collaborating even more closely between relevant ministries for growing needs for support
in the critical infrastructure and other fields.
 developing human resources to support the activities of Japanese businesses overseas overthe medium to long term.

4

ASEAN-Japan Cybersecurity Policy Meeting• ASEAN-Japan Cybersecurity Policy Meeting (AJ-CPM) is aframework of Cybersecurity Authorities of ASEAN Member Statesand Japan for promoting cybersecurity policy cooperation.
• NISC, Japan serves as secretariat of AJ-CPM.

• The AJ-CPM has been established in 2009 and acknowledged at"ASEAN-Japan Ministerial Policy Meeting on Cybersecurity
Cooperation" in 2013.
• The "Joint Ministerial Statement" of the Meeting encouraged joint effort in the following
areas.
• Creating a secure business environment• Building a secure information and communication network• Enhancing capacity for cyber security"We believe that a secure cyberspace is one of the major drivers in innovation as well as being
essential in promoting social and economic activities and strengthening ASEAN connectivity"5Working Group Meetings and Events• The AJ-CPM has established its Working Group
in 2014 to plan and implement projects.
• The WG have 3 meetings a year.
WG Meeting• The AJ-CPM conduct 3 events yearly.
• Cyber Exercise• Face-to-Face Table Top Exercise (TTX)• CIIP Workshop

Table Top Exercise

Yearly Schedule
1st WG(director/expert)

2nd WG(director/expert)

Cyber Ex.

3rd WG(director/expert)

AJ-CPM(senior official)

TTX
CIIP WS6

Collaborative Activities (CAs) under AJ-CPM• The AJ-CPM has endorsed to promote 10 CAs in 2023.
• CA is a yearly activities that all Member Agencies are participating.
• Each CA is lead by its Lead Country, and its output should be reported to AJ-CPM.

1. Remote Cyber Exercise
2. TTX
3. CIIP Workshop
4. Joint Awareness raising
5. Capacity Building
6. Voluntary Mutual Notification Program
7. AJ Cybersecurity Reference
8. WG Steering
9. Joint-Government-Industry-Academia (Since 2021)
10. 50th Year Commemorative Activity (Since 2023)

7

Member Agencies of AJ-CPM• The AJ-CPM is a closed meeting consist of senior officials of eachcountry's Cybersecurity Agency and ASEAN Secretariat.
• The member agencies can invite officials of their cooperative agencies.

Country

Member Agencies of AJ-CPM
Cybersecurity Authority

Cooperative Agency

National CSIRT

Brunei

NSC

BruCERT

Cambodia

MPTC

CamCERT

Indonesia

BSSN

ID-SIRTII/CC

MCIT

Japan

NISC

NISC, JPCERT/CC

MIC, METI, MOFA, JPCERT/CC, JICA, IPA, JC3

Laos

MPT

LaoCERT

Malaysia

NACSA

NC4

Myanmar

MOTC, NCSC (of MOTC)

mmCERT

Philippines

DICT

NCERT

Singapore

CSA

SingCERT

MCI

Thailand

NCSA

ThaiCERT

ETDA

VietnamAIS

VNCERT

MCMC* Cooperative Agencies are not limited to that shown on the table.

8Cybersecurity Capacity Building from Thailand (AJCCBC)AJCCBC implements human resource development programs on
cybersecurity in ASEAN with the support of the Japanese government.
 ETDA of Thailand established the centre based on the agreement of the17th ASEAN and Japan Telecommunications and Information Technology
Ministers Meeting in December 2017. From October 2022, the centre has
been operated by NCSA.

Main activities
１．Cybersecurity Hands-on Exercises
Hands-on exercise for government organizations and criticalinfrastructure providers
 Cyber Defense Exercise with Recurrence (CYDER) Digital forensics
 Malware analysis

Ministers Meeting (Dec 2017)

２．ASEAN Youth Cybersecurity Technical Challenge (Cyber SEA Game)
Competition of cyberattack handling that promotes the ability of young
engineers and students selected from ASEAN member states (Once a year)

３．Cybersecurity Online Training Programs
Since COVID-19 pandemic, online training courses have been provided.

CYDER

9

Cybersecurity Cooperation from Thailand to ASEAN

AJCCBC is the Capacity Building Centre for ASEAN.

AJCCBC Operator

AJCCBC program developmentassistance

Capacity Building Coordination

Cybersecurity
Development Assistance10

Let’s Createa Free, Fair and Secure Cyberspace11Thank you !

12