Cybersecurity in ASEAN An Urgent Call to Action

Cybersecurity in ASEAN: An Urgent Call to Action

preparedness. Providing transparent guidance that informs cybersecurity investment decisions

can accelerate each country’s transition from awareness to action.

2.1.3 Limited threat intelligence sharingbecause of a lack of trust and transparencywill lead

to evenmore porous cyber defensemechanisms

Most ASEAN governments and businesses are reluctant to share incident information or

threat intelligence, which is crucial for forensic investigation and prevention. With the

growing sophistication and faster pace of cyberattacks (for example, zero-day exploits and

advanced persistent threats), sharing intelligence, and best practices along with a joint

incident response can help mitigate the region’s cyber risk (see sidebar: Cisco and Interpol

Collaborate to Combat Cybercrime).

The lack of intelligence sharing is a global issue, stemming from limited mandates to share

specific cyber incident information across intelligence agencies. Furthermore, ASEAN lacks a

governing framework to introduce incident reviews on a regional level. Efforts are under way in

cybersecurity spend of GDP

Sources: World Bank, Tufts University

Digital Planet

, analyst reports; A.T. Kearney analysis

Figure

Correlation between digital evolution and cybersecurity spend

Digital Evolution Index

Greaterdigitalmaturity

Highercybersecurityprotection

ASEAN6

Benchmarks

Philippines

Indonesia

Russia

Malaysia

Israel

China

Japan

Australia

United Kingdom

United States

Thailand

Singapore

Germany

Vietnam

Nascent

Fortified

Tipping

point

Cisco and Interpol Collaborate toCombat Cybercrime

Ciscoandthe International

Criminal PoliceOrganization

(Interpol) announcedan

agreement toshare threat

intelligenceas the first step in

jointly fightingcybercrime. The

alliancewill see the two

organizationsdevelopacoordi-

natedandfocusedapproach to

datasharing. Thisnot onlywill

allowforquick threatdetection

aroundtheworld, but alsopave the

way forpotential collaborationon

trainingandknowledgesharing.

Cisco’sagreementwith Interpol

supports theorganization’s

programs targetingbothpure

cybercrimeandcyber-enabled

crimes toassistmember countries

with identifyingcyberattacksand

theirperpetrators.