6 / 60
2
Cybersecurity in ASEAN: An Urgent Call to Action
An urgent call to action
The response to these challenges must be comprehensive, engaging an array of stakeholders to
deal with the scale of the threat and to ensure that ASEAN’s leap into the digital economy is
unobstructed. An active defense mindset is required to work together to defend and leverage
collective ASEAN resources.
The ideal regional cybersecurity defense playbook needs to address a four-point agenda
(see figure 1):
•
Elevate cybersecurity on the regional policy agenda.
•
Secure a sustained commitment to cybersecurity.
•
Fortify the ecosystem.
•
Build the next wave of cybersecurity capability.
Source: A.T. Kearney analysis
Figure
Regional cybersecurity defense playbook
Elevate cybersecurity
on the regional
policy agenda
Secure a sustained
commitment
to cybersecurity
Fortify
the ecosystem
Build the next wave
of cybersecurity
capability
•
Concerted coordination to steer the implementation of a Rapid Action
Cybersecurity (RAC) Framework
•
Elevate cybersecurity to the top of the agenda in economic dialogue (for example,
establish a regional coordination platform and multilateral agreement to have
“cybersafe” trading partners)
•
Pursue a commitment to address the regional cybersecurity spending gap
•
De ine and track cybersecurity metrics through a cyber-hygiene dashboard
•
Foster a risk-centric mindset in the corporate sector
•
Instill a culture around sharing threat intelligence
•
Extend cyber resilience across the supply chain (i.e. to business partners)
•
Implement regional public–private partnerships and encourage industry alliances
•
Develop the next generation of security professionals
•
Strengthen the local cybersecurity industry through deeper cooperation
and collaboration with global players
•
Drive R&D around emerging threat vectors, including arti icial intelligence
and blockchain
•
Anchor world-class capabilities
Elevatingcybersecurityon the regional policyagenda
calls for the immediate implementation
at national levels of a Rapid Action Cybersecurity Framework to harmonize cyber resilience
across the region. The Rapid Action Cybersecurity Framework is a comprehensive 12-point action
agenda for national governments to address gaps in strategy, policy, legislation, and governance
related to cybersecurity. In addition, adopting an ASEAN-initiated multilateral regime around
cybercrime can bring strategic and operational benefits to the region, particularly in rapid law
enforcement cooperation. National governments should take the lead in implementing the
framework with support, guidance, and oversight from the ASEAN Ministerial Conference on
Cybersecurity (AMCC). The ASEAN secretary-general’s annual report should be expanded to
include a scorecard that tracks each country’s progress in achieving milestones set by the Rapid
Action Cybersecurity Framework. To
securea sustainedcommitment tocybersecurity
and