Where will the 2nd Government Cyber Resilience Summit be held?

The summit will take place in the city of Bangkok, THA.

What is the primary focus of this summit?

The summit focuses on enhancing government cyber resilience, addressing strategies for protecting critical infrastructure and data from cyber threats within the public sector.

Will there be opportunities for international collaboration at the summit?

The summit's nature suggests an emphasis on collaborative approaches and sharing best practices, indicating opportunities for international engagement among government officials and experts.

2nd Government Cyber Resilience Summit – Thailand

Name: 2nd Government Cyber Resilience Summit – Thailand
Start: 2026-08-04 00:00:00+00:00
End: 2026-08-04 00:00:00+00:00
Location: Bangkok

Aug 4, 2026Bangkok, ThailandIn-person

Registration open

The 2nd Government Cyber Resilience Summit in Bangkok, THA, focuses on strengthening national cybersecurity defenses. This event brings together government officials, industry experts, and thought leaders to discuss strategies for protecting critical infrastructure and data from evolving cyber threats. The summit emphasizes collaborative approaches and the sharing of best practices to enhance the resilience of public sector digital systems.

Committees & topics

Topics
Strengthening Thailand's Digital Government Resilience · Cyber Threat Intelligence and Incident Response · Protecting Critical National Infrastructure · Public-Private Partnerships for National Cybersecurity · AI, Automation and Advanced Technologies in Cybersecurity · Cloud Security and Sovereign Cloud Policy · Data Privacy and the PDPA Implementation Challenge · Identity and Access Management for Government Services

Why it matters

In an increasingly interconnected world, the cyber resilience of government systems is paramount. Nations face a constant barrage of sophisticated cyberattacks targeting essential services, national security, and citizen data. A breach in government cyber defenses can lead to significant economic disruption, erosion of public trust, and compromise of sensitive information.

This summit provides a crucial platform for addressing these challenges head-on. By fostering dialogue and collaboration among key stakeholders, it aims to identify vulnerabilities, develop robust defense mechanisms, and promote a proactive stance against cyber adversaries. The focus on government cyber resilience underscores the understanding that national security in the digital age is intrinsically linked to the strength of a nation's cyber infrastructure.

How to prepare

Delegates preparing for the summit should focus on understanding the multifaceted nature of cyber threats and the strategic importance of government cyber resilience. Familiarity with the general landscape of national cybersecurity challenges will be beneficial. Considering the event's location in THA, an understanding of regional cybersecurity dynamics and initiatives could also provide valuable context.

It is advisable for participants to consider how different national approaches to cybersecurity can inform broader strategies. Reflecting on the various methods governments employ to protect their digital assets and critical infrastructure will enrich discussions. Delegates should also be prepared to contribute to conversations about international cooperation in cybersecurity, as collective defense is often a key theme in such gatherings.

Country perspectives

Where the most-relevant 13 countries stand on the core issues in play. Click through for the full country profile.

Thailand

Host nation with a growing focus on enhancing its national cyber resilience.

Role in topic

As the host country, THA is central to the summit, showcasing its commitment to strengthening government cyber defenses and fostering regional collaboration on cybersecurity issues. The event in Bangkok highlights THA's role in addressing cyber threats within Southeast Asia.

Singapore

A leader in cybersecurity innovation and policy in Southeast Asia.

Role in topic

SGP often serves as a benchmark for cybersecurity best practices in the region. Its advanced strategies and robust frameworks for government cyber resilience can offer valuable insights and models for other participating nations.

Japan

A technologically advanced nation with significant experience in critical infrastructure protection.

Role in topic

JPN's experience in securing its critical infrastructure and developing sophisticated cyber defense mechanisms can provide important lessons. Its perspective on balancing technological advancement with security imperatives is highly relevant.

United States

A global leader in cybersecurity research, development, and policy.

Role in topic

The USA's extensive expertise in cybersecurity, including its strategies for protecting government networks and responding to major incidents, offers a broad perspective. Its contributions often shape international dialogue on cyber norms and defense.

Australia

An active participant in regional and international cybersecurity initiatives.

Role in topic

AUS brings a perspective shaped by its engagement in various multilateral cybersecurity forums. Its approaches to national cyber resilience, particularly in critical sectors, can offer comparative insights for delegates.

South Korea

A nation with advanced digital infrastructure and experience in defending against persistent cyber threats.

Role in topic

KOR's experience in maintaining cyber resilience amidst a high volume of sophisticated attacks provides a unique and valuable perspective on proactive defense and rapid response strategies for government systems.

Germany

A European economic powerhouse with a strong emphasis on data privacy and critical infrastructure protection.

Role in topic

DEU's focus on regulatory frameworks for data protection and its strategies for safeguarding critical national infrastructure offer a European perspective on government cyber resilience that can inform global best practices.

Israel

A global leader in cybersecurity technology and innovation.

Role in topic

ISR's advanced capabilities in cybersecurity, particularly in defense technologies and intelligence, provide insights into cutting-edge solutions for protecting government assets and responding to complex cyber threats.

China

A major global power with a rapidly developing and extensive cybersecurity apparatus.

Role in topic

CHN's significant investment in its digital infrastructure and cybersecurity capabilities presents a unique perspective on national cyber resilience, particularly regarding state-sponsored activities and data governance.

United Kingdom

A nation with a comprehensive national cybersecurity strategy and international engagement.

Role in topic

The GBR's structured approach to national cybersecurity, including its focus on public-private partnerships and international cooperation, provides a model for developing robust government cyber resilience.

Estonia

A pioneer in digital governance and a strong advocate for cyber defense.

Role in topic

EST's advanced digital society and its proactive stance on cyber defense offer valuable lessons in building resilient government systems from the ground up, especially in the context of e-governance.

France

A European nation with a focus on strategic autonomy in cyberspace and critical infrastructure security.

Role in topic

FRA's emphasis on national sovereignty in cyberspace and its strategies for protecting critical infrastructure provide a perspective on how major European powers approach government cyber resilience and digital security.

India

A rapidly digitizing nation facing diverse cybersecurity challenges.

Role in topic

IND's experience in managing cybersecurity for a vast and rapidly expanding digital landscape offers insights into scaling cyber resilience efforts for large populations and diverse governmental systems.

Topics & background

The background behind each topic and the actors that shape it.

Strengthening Thailand's Digital Government Resilience

Thailand has pursued an ambitious 'Thailand 4.0' digital transformation agenda since 2016, accelerating e-government services through the Digital Government Development Agency (DGA) and the Electronic Transactions Development Agency (ETDA). The 2019 Cybersecurity Act established the National Cyber Security Agency (NCSA) as the lead coordinator, while the Personal Data Protection Act (PDPA), fully enforced from 2022, imposed new obligations on public agencies handling citizen data. Despite these advances, government systems have repeatedly suffered breaches, including the 2021 Ministry of Public Health incident and recurring leaks from agency portals, exposing weaknesses in legacy systems, fragmented procurement, and uneven skills across ministries. Today the core challenge is operational maturity: translating policy frameworks into resilient architectures, continuity planning, and a skilled workforce. Cabinet-level pushes toward cloud-first policy, the GDX data-exchange platform, and digital ID (ThaID) raise the stakes, because a single failure now cascades across services. Regional peers in ASEAN — particularly Singapore and Malaysia — provide reference models, while Thailand also coordinates with international partners on capacity building. The debate centers on how to harden critical e-government platforms without slowing service delivery to citizens and businesses.

Key players

Cyber Threat Intelligence and Incident Response

The institutionalization of computer emergency response teams began in the late 1980s after the Morris Worm, and Thailand established ThaiCERT in 2000, later folded under ETDA and then aligned with the NCSA's National CERT function. Across Asia-Pacific, the rise of ransomware-as-a-service, state-aligned APT groups, and supply-chain attacks (SolarWinds in 2020, MOVEit in 2023) has pushed governments to move beyond reactive response toward proactive threat intelligence sharing. Regional mechanisms include the ASEAN CERT Information Exchange (established 2022 in Singapore) and the APCERT community. The current debate concerns how to operationalize intelligence sharing across sovereign boundaries and between public agencies and private operators, who hold the bulk of telemetry. Issues include classification of indicators, liability for shared data, integration of MITRE ATT&CK and STIX/TAXII standards, and the speed of cross-border legal assistance for incident attribution. For Thailand, the practical question is how NCSA, sectoral regulators (BoT, NBTC, SEC), and private SOCs coordinate during a live incident without bottlenecks.

Key players

Protecting Critical National Infrastructure

Concern over critical infrastructure protection (CIP) crystallized globally after the 2010 Stuxnet attack on Iranian centrifuges and intensified with the 2015 and 2016 Ukraine power grid intrusions, the 2021 Colonial Pipeline ransomware shutdown, and repeated water utility incidents. Thailand's Cybersecurity Act of 2019 introduced the concept of Critical Information Infrastructure (CII), designating sectors including national security, government services, finance, telecommunications, transport, energy and public utilities, and public health. The NCSA issues sectoral codes of practice, and operators must report incidents and meet baseline standards. The core dispute is how prescriptive the state should be with largely private operators, and how to handle convergence between IT and operational technology (OT/ICS) environments that were never designed for internet exposure. Thailand's exposure is amplified by tourism-dependent transport networks, large industrial estates in the Eastern Economic Corridor, and cross-border power and gas links with neighbors. Aligning with frameworks such as IEC 62443 and the U.S. NIST CSF, while building domestic OT expertise, is the practical agenda.

Key players

Public-Private Partnerships for National Cybersecurity

Because most digital infrastructure — cloud, telecom, finance, software — is privately owned, no national cyber strategy can succeed without structured public-private cooperation. The U.S. Joint Cyber Defense Collaborative (JCDC, 2021), the U.K.'s Cyber Security Information Sharing Partnership (CiSP), and Singapore's SG Cyber Safe ecosystem are leading models. Thailand has pursued PPP through the NCSA's industry committees, BoT-led financial sector exercises, and academic partnerships, but engagement has historically been ad hoc and concentrated among large enterprises. The debate revolves around incentives, liability shields, and trust. Firms fear regulatory exposure when sharing breach data; governments worry about over-reliance on a small number of foreign vendors. Workforce development — Thailand faces an estimated shortfall of tens of thousands of cyber professionals — is another shared concern that neither sector can solve alone. The agenda includes joint exercises, sectoral ISACs, procurement standards, and SME uplift programs.

Key players

AI, Automation and Advanced Technologies in Cybersecurity

Machine learning has been used in security tooling for over a decade, but the 2022–2024 wave of generative AI sharply changed both offense and defense. Attackers now use LLMs for phishing, code generation, and deepfake-enabled social engineering, while defenders deploy AI for anomaly detection, SOC automation (SOAR), and faster triage. Global policy responses include the EU AI Act (2024), the U.S. Executive Order 14110 on AI (2023, partially rescinded in 2025), and the Bletchley and Seoul AI Safety Summits. Thailand released a National AI Strategy and Action Plan (2022–2027) and is drafting AI-specific legislation through ETDA. The core dispute is how to adopt AI in government security operations responsibly: managing model risk, data residency for training, dependence on a few foreign foundation-model providers, and ensuring that AI deployments comply with PDPA. Automation also raises workforce questions, as junior analyst roles compress while demand grows for prompt-aware, AI-supervising defenders.

Key players

Cloud Security and Sovereign Cloud Policy

Government cloud adoption accelerated after 2015, when hyperscalers expanded into Asia-Pacific regions, and again after COVID-19 forced rapid remote-service rollout. Thailand adopted a 'Cloud First' policy in 2022, and AWS, Google, Microsoft and Huawei have all announced or opened local regions, while the state-backed GDCC (Government Data Center and Cloud) provides a domestic option. The PDPA, sectoral data residency rules from the BoT and NBTC, and the Cybersecurity Act all shape how agencies can use cloud. The central issue is balancing the efficiency and security benefits of hyperscale cloud against concerns over sovereignty, vendor lock-in, lawful access by foreign jurisdictions (notably under the U.S. CLOUD Act), and resilience during regional outages. Shared-responsibility misconfigurations — not platform breaches — remain the dominant cause of cloud incidents, so the policy debate is as much about agency skills and procurement discipline as about geopolitics.

Key players

Data Privacy and the PDPA Implementation Challenge

Global data privacy regulation was reshaped by the EU's General Data Protection Regulation (GDPR) in 2018, which became the template for laws across Asia. Thailand passed its Personal Data Protection Act (PDPA) in 2019, with full enforcement delayed to June 2022 due to COVID-19 and readiness concerns. The PDPA established the Personal Data Protection Committee (PDPC) and introduced data-subject rights, lawful-basis requirements, breach notification, and cross-border transfer rules largely modelled on the GDPR. Implementation has been uneven. Public agencies and SMEs struggle with consent management, records of processing, and DPO appointments, while major leaks — including the 2022 healthcare incident affecting millions of records — have exposed enforcement gaps. Cross-border data flow rules under the ASEAN Model Contractual Clauses, the APEC CBPR system, and emerging adequacy discussions with the EU shape Thailand's trade-and-privacy posture. The debate covers enforcement capacity, alignment with AI governance, and reconciling national security access with data subject rights.

Key players

Identity and Access Management for Government Services

Digital identity has become foundational for modern e-government, with India's Aadhaar (launched 2009), Estonia's e-ID, and Singapore's Singpass setting global reference points. Thailand has pursued a national digital ID through the NDID consortium for financial services and the government-led ThaID app operated by the Department of Provincial Administration, alongside biometric systems used by immigration and telecom registration. Identity is also the leading attack vector: credential theft, MFA fatigue, and session hijacking now drive the majority of breaches, prompting a global shift toward Zero Trust Architecture (NIST SP 800-207) and phishing-resistant authentication. The agenda for Thailand combines technical modernization — federated identity, FIDO2/passkeys, privileged access management — with governance questions about biometrics, inclusion of citizens without smartphones, and the role of the private sector in identity assurance. Interoperability with ASEAN partners and alignment with emerging standards such as W3C verifiable credentials and the EU Digital Identity Wallet are increasingly part of the conversation.

Key players

Resources

News, lessons, and country profiles to prep for 2nd Government Cyber Resilience Summit – Thailand.

Recent reporting to ground your prep

Trump's Legal Battles Impact 2026 Elections

Trump's Economic Reset

GOP Conservative Factions Clash Over Trump

Virginia Joins National Popular Vote Compact

Lessons

Bite-sized lessons to build the basics

Dynamic Analysis

Hidden Stakeholders

Engagement Strategies

Stakeholder Mapping Workshop

Courses

Guided courses that go deeper on the topic

Advanced Negotiation

Crisis Management

Multilateral Negotiation

Policy Brief Writing

The states in play, with the data that shapes their stance

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

By committee

Frequently asked questions

2nd Government Cyber Resilience Summit – Thailand

Aug 4, 2026Bangkok, ThailandIn-person

Registration open

Committees & topics

Topics
Strengthening Thailand's Digital Government Resilience · Cyber Threat Intelligence and Incident Response · Protecting Critical National Infrastructure · Public-Private Partnerships for National Cybersecurity · AI, Automation and Advanced Technologies in Cybersecurity · Cloud Security and Sovereign Cloud Policy · Data Privacy and the PDPA Implementation Challenge · Identity and Access Management for Government Services

Why it matters

How to prepare

Country perspectives

Where the most-relevant 13 countries stand on the core issues in play. Click through for the full country profile.

Thailand

Host nation with a growing focus on enhancing its national cyber resilience.

Role in topic

Singapore

A leader in cybersecurity innovation and policy in Southeast Asia.

Role in topic

Japan

A technologically advanced nation with significant experience in critical infrastructure protection.

Role in topic

United States

A global leader in cybersecurity research, development, and policy.

Role in topic

Australia

An active participant in regional and international cybersecurity initiatives.

Role in topic

South Korea

A nation with advanced digital infrastructure and experience in defending against persistent cyber threats.

Role in topic

Germany

A European economic powerhouse with a strong emphasis on data privacy and critical infrastructure protection.

Role in topic

Israel

A global leader in cybersecurity technology and innovation.

Role in topic

China

A major global power with a rapidly developing and extensive cybersecurity apparatus.

Role in topic

United Kingdom

A nation with a comprehensive national cybersecurity strategy and international engagement.

Role in topic

Estonia

A pioneer in digital governance and a strong advocate for cyber defense.

Role in topic

EST's advanced digital society and its proactive stance on cyber defense offer valuable lessons in building resilient government systems from the ground up, especially in the context of e-governance.

France

A European nation with a focus on strategic autonomy in cyberspace and critical infrastructure security.

Role in topic

India

A rapidly digitizing nation facing diverse cybersecurity challenges.

Role in topic