Where is CYSEC THAILAND 2026 being held?

The event will take place in Bangkok, THA.

What is the main focus of CYSEC THAILAND 2026?

The conference's main theme is "Thailand Cyber Shield: Advancing the Nation's Digital Security," focusing on enhancing THA's cybersecurity capabilities.

CYSEC THAILAND 2026 – Thailand Cyber Shield: Advancing the Nation's Digital Security

Name: CYSEC THAILAND 2026 – Thailand Cyber Shield: Advancing the Nation's Digital Security
Start: 2026-07-22T00:00:00Z
End: 2026-07-22T00:00:00Z
Location: Bangkok

Jul 22, 2026Bangkok, ThailandIn-person

Registration open

CYSEC THAILAND 2026, themed "Thailand Cyber Shield: Advancing the Nation's Digital Security," is a significant event focusing on cybersecurity in Southeast Asia. Hosted in Bangkok, THA, this conference brings together experts and stakeholders to address the evolving landscape of digital threats and explore strategies for enhancing national cyber resilience. The discussions will likely cover a broad spectrum of topics, from policy frameworks to technological advancements, aiming to fortify THA's digital infrastructure against sophisticated attacks.

Committees & topics

Topics
Cloud Security · Incident Response and Recovery · Threat Intelligence Sharing · Artificial Intelligence and Machine Learning in Cyber Defense · Cybersecurity Innovations and Trends · Cyber Resilience for Critical Infrastructure · Emerging Cyber Threats · Artificial Intelligence and Automation in Cybersecurity

Why it matters

The digital domain has become an indispensable part of modern governance, economy, and social life, making robust cybersecurity a national imperative. For THA, a rapidly digitalizing economy in a geopolitically dynamic region, securing its digital assets is crucial for maintaining economic stability, protecting critical infrastructure, and safeguarding national sovereignty. This event provides a platform for THA to showcase its commitment to digital security and to collaborate with international partners on best practices and emerging solutions.

The implications extend beyond national borders. In an interconnected world, a cyberattack on one nation can have ripple effects across global supply chains and international relations. Therefore, initiatives like CYSEC THAILAND contribute to regional and global cybersecurity stability. The insights and collaborations fostered at this event can inform policy decisions, drive technological innovation, and build a more secure digital future for THA and its partners.

How to prepare

Delegates preparing for CYSEC THAILAND 2026 should engage in a thorough stakeholder mapping exercise. Identifying key government agencies, private sector entities, academic institutions, and international organizations involved in THA's cybersecurity landscape will be crucial. Understanding their respective interests, capabilities, and potential contributions will allow for more targeted and effective engagement strategies during the conference.

Furthermore, a dynamic analysis of current cybersecurity threats and vulnerabilities specific to the Southeast Asian region, and THA in particular, would be beneficial. This includes researching recent cyber incidents, national cybersecurity policies, and technological trends. Delegates should also consider the role of hidden stakeholders, such as civil society groups or less visible technological innovators, who might offer unique perspectives or solutions. Preparing with this comprehensive understanding will enable delegates to contribute meaningfully to discussions and forge impactful collaborations.

Country perspectives

Where the most-relevant 6 countries stand on the core issues in play. Click through for the full country profile.

Thailand

Committed to strengthening national digital security and fostering international collaboration.

Role in topic

As the host nation, THA is at the forefront of this discussion, seeking to enhance its <a href="/learn/glossary/critical-information-infrastructure">critical information infrastructure</a> and develop a comprehensive 'Cyber Shield' strategy. The nation is keen to adopt advanced cybersecurity measures and collaborate with global experts to protect its digital economy and national interests.

United States

A key partner in global cybersecurity initiatives, offering advanced technological solutions and policy expertise.

Role in topic

The USA often participates in international cybersecurity dialogues, providing insights into advanced threat detection, response mechanisms, and policy frameworks. Its presence would likely focus on promoting international norms in cyberspace and offering technological partnerships.

China

A major global player in digital technology and cybersecurity, with a focus on national digital sovereignty.

Role in topic

CHN's perspective would likely emphasize national control over digital infrastructure and data, alongside its significant advancements in AI and quantum computing, which have implications for cybersecurity. Its participation could highlight bilateral cooperation in digital security.

Singapore

A regional leader in cybersecurity, known for its proactive national strategies and robust digital infrastructure.

Role in topic

SGP is often seen as a model for national cybersecurity preparedness in Southeast Asia. Its representatives would likely share best practices in <a href="/learn/glossary/critical-infrastructure-protection">critical infrastructure protection</a>, cyber talent development, and public-private partnerships.

Israel

A global leader in cybersecurity innovation and defense technologies.

Role in topic

ISR's expertise in developing cutting-edge cybersecurity solutions and its experience in defending against sophisticated cyber threats would be highly relevant. Its participation could focus on sharing technological advancements and strategic approaches to cyber defense.

Estonia

A pioneer in digital governance and cyber defense, advocating for international cooperation and resilience.

Role in topic

EST, with its highly digitized society, offers valuable lessons in building resilient digital infrastructure and implementing effective cyber defense strategies. Its representatives might discuss national cyber resilience frameworks and international collaboration against cybercrime.

Topics & background

The background behind each topic and the actors that shape it.

Cloud Security

The mass migration of government and enterprise workloads to public, private, and hybrid cloud environments over the past decade has fundamentally reshaped the cybersecurity perimeter. Hyperscale providers — predominantly headquartered in the United States and China — now host critical data for states across Southeast Asia, including Thailand's growing digital government stack under the PDPA and the Cloud First Policy adopted in 2021. While the cloud offers elasticity and resilience, it has also concentrated systemic risk: misconfigurations, identity and access management failures, and supply-chain compromises in shared services (such as the 2020 SolarWinds and 2023 Microsoft Exchange Online incidents) have demonstrated how a single provider weakness can cascade across thousands of tenants. The core policy dispute centers on data sovereignty, shared-responsibility ambiguity, and cross-border law enforcement access. The US CLOUD Act, the EU's GDPR and forthcoming EUCS certification, and China's Data Security Law each assert competing jurisdictional claims over data physically stored or processed within their reach. ASEAN states, including Thailand, are navigating between these blocs while building national cloud frameworks and sovereign cloud initiatives. Today the conversation is shifting from basic compliance toward zero-trust architectures, confidential computing, and post-quantum readiness for cloud key management.

Key players

Incident Response and Recovery

Incident response has evolved from an IT housekeeping function into a strategic national capability. Landmark incidents — the 2017 WannaCry and NotPetya attacks, the 2021 Colonial Pipeline ransomware shutdown, and the 2024 CrowdStrike update failure that grounded airlines worldwide — have demonstrated that mean-time-to-recover, not just prevention, determines economic and human cost. Most advanced economies now operate national CSIRTs/CERTs (Thailand's ThaiCERT, US CISA, Singapore's CSA, Japan's JPCERT/CC) and have mandated breach-notification timelines, typically 24 to 72 hours. The contemporary debate focuses on three pressures. First, ransomware-as-a-service has industrialized extortion, prompting the 46-state Counter Ransomware Initiative to pledge against ransom payments — a commitment many private victims still violate. Second, supply-chain incidents demand coordinated multi-vendor response playbooks that current bilateral arrangements struggle to deliver. Third, recovery increasingly depends on immutable backups, tested business-continuity plans, and cyber insurance markets that are tightening coverage. For Thailand and ASEAN, building interoperable response capacity through the ASEAN-Singapore Cybersecurity Centre of Excellence remains a priority.

Key players

Artificial Intelligence and Machine Learning in Cyber Defense

Machine learning has moved from anomaly detection research into the operational core of cyber defense. Endpoint detection and response (EDR), user and entity behavior analytics (UEBA), and security operations center (SOC) co-pilots now rely on ML models trained on telemetry from millions of endpoints. Vendors including Microsoft, CrowdStrike, Palo Alto Networks, and emerging Asian firms have integrated large language models into triage, threat hunting, and automated playbook generation since 2023. National strategies — including the US National Cybersecurity Strategy, the EU AI Act, and Thailand's National AI Strategy — explicitly recognize AI as a defensive enabler. The controversies are dual-use and accountability. The same models that detect intrusions can be weaponized to generate polymorphic malware, deepfake-driven social engineering, and automated vulnerability discovery, as documented in the 2024 NCSC assessment that AI will heighten the volume and impact of cyberattacks. Defenders also face model risks: data poisoning, adversarial evasion, and over-reliance on opaque systems. The policy frontier concerns secure AI development guidelines (issued jointly in 2023 by CISA, NCSC, and 16 partners), evaluation regimes for AI-enabled security products, and the workforce shift as junior analyst tasks are automated.

Key players

Cybersecurity Innovations and Trends

The cybersecurity market has shifted decisively toward platform consolidation, zero-trust architectures, and identity as the new perimeter. Following NIST SP 800-207 on zero trust and the US Executive Order 14028, governments worldwide have begun retiring perimeter-based defenses. Parallel trends include the rise of Secure Access Service Edge (SASE), passkeys replacing passwords, confidential computing, and early deployments of post-quantum cryptography following NIST's 2024 standardization of ML-KEM and ML-DSA. Thailand's NCSA and the Bank of Thailand have piloted several of these architectures in the financial sector. Innovation, however, outpaces governance. The OECD and ITU have flagged fragmentation in certification regimes (US FedRAMP, EU Cybersecurity Act, Singapore CLS, Japan ISMAP) that raises compliance costs for cross-border vendors. Software bills of materials (SBOMs), mandated under EO 14028 and now appearing in the EU Cyber Resilience Act, are reshaping supply-chain transparency. The contemporary debate balances rapid adoption of innovations such as AI co-pilots and quantum-safe migration against the risks of vendor lock-in, market concentration, and uneven access for developing economies.

Key players

Cyber Resilience for Critical Infrastructure

Critical infrastructure — energy, water, transport, finance, health, and telecommunications — has become the principal target of state-aligned cyber operations. Incidents including the 2015 and 2016 attacks on Ukraine's power grid, the 2021 Colonial Pipeline ransomware, the 2023 Danish energy-sector intrusion, and persistent Volt Typhoon pre-positioning in US critical networks have transformed resilience from a regulatory aspiration into a national security imperative. The UN Open-Ended Working Group on ICTs has affirmed that international law applies in cyberspace and that critical infrastructure should not be targeted, though enforcement remains weak. Thailand designated eight Critical Information Infrastructure (CII) sectors under its 2019 Cybersecurity Act and is operationalizing sector-specific CERTs. Globally, frameworks such as the US CIRCIA reporting law, the EU NIS2 Directive, and Japan's Economic Security Promotion Act are raising baseline obligations. Disputes persist over how to balance mandatory reporting with operator burden, how to protect operational technology (OT) systems that cannot easily be patched, and how to handle attribution and proportional response when a critical-infrastructure attack falls below the threshold of armed conflict.

Key players

Emerging Cyber Threats

The threat landscape in 2025-2026 is characterized by AI-augmented social engineering, ransomware diversification, supply-chain compromises, and the looming 'harvest now, decrypt later' risk as quantum computing matures. ENISA, MITRE, and national CERTs have flagged the industrialization of deepfake-enabled fraud, exemplified by the 2024 Arup case in Hong Kong where deepfaked executives authorized a USD 25 million transfer. State-aligned actors increasingly blend espionage with destructive payloads, while hacktivist groups exploit geopolitical flashpoints in Ukraine, Gaza, and the South China Sea. For Southeast Asia, the most acute emerging threats include scam compounds operating from the Mekong sub-region, which UNODC estimates generate tens of billions of dollars annually; mobile malware targeting digital payment systems such as Thailand's PromptPay; and intrusion campaigns against semiconductor and telecommunications supply chains. Policy responses remain reactive: the UN cybercrime convention adopted in 2024 provides a baseline but has drawn human-rights criticism, while regional cooperation through ASEAN and Interpol's Asia-Pacific Joint Operations is still maturing.

Key players

Artificial Intelligence and Automation in Cybersecurity

Automation has been a feature of cyber operations since the earliest SIEM correlation rules, but the convergence of generative AI, security orchestration (SOAR), and autonomous agents marks a step change. SOCs increasingly deploy AI co-pilots — Microsoft Security Copilot, Google's Sec-PaLM, and open-source equivalents — to triage alerts, draft incident reports, and recommend containment actions. DARPA's 2024-2025 AI Cyber Challenge demonstrated autonomous systems that can find and patch vulnerabilities in open-source software, foreshadowing a future where defense operates at machine speed. The central policy questions are governance, accountability, and equity. Autonomous response — for example, isolating a hospital network mid-attack — raises liability and safety issues that existing frameworks barely address. Adversaries are automating too: phishing kits with LLM backends, automated reconnaissance, and AI-driven vulnerability discovery shrink defender reaction windows. International guidance is emerging through the UK-US Bletchley Declaration, the 2023 CISA/NCSC Secure AI Development Guidelines, and OECD AI Principles, but binding norms are absent. For Thailand and other developing-economy stakeholders, access to AI security tooling, local-language models, and skilled operators is itself a strategic question.

Key players

Resources

News, lessons, and country profiles to prep for CYSEC THAILAND 2026 – Thailand Cyber Shield: Advancing the Nation's Digital Security.

Recent reporting to ground your prep

Arming an archipelago: Is time running out for Europe's oldest DMZ? | Euronews

Comprehensive approach to security: Federal Council launches consultation on Switzerland's security policy strategy

Europe's June Heatwave: Infrastructure Crisis

Ukraine Drone Strikes Crimea Power Grid

Lessons

Bite-sized lessons to build the basics

Hidden Stakeholders

Engagement Strategies

Dynamic Analysis

Stakeholder Mapping Workshop

Courses

Guided courses that go deeper on the topic

Advanced Negotiation

Multilateral Negotiation

Policy Brief Writing

Conflict Resolution

The states in play, with the data that shapes their stance

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

By committee

Frequently asked questions

CYSEC THAILAND 2026 – Thailand Cyber Shield: Advancing the Nation's Digital Security

Jul 22, 2026Bangkok, ThailandIn-person

Registration open

Committees & topics

Topics
Cloud Security · Incident Response and Recovery · Threat Intelligence Sharing · Artificial Intelligence and Machine Learning in Cyber Defense · Cybersecurity Innovations and Trends · Cyber Resilience for Critical Infrastructure · Emerging Cyber Threats · Artificial Intelligence and Automation in Cybersecurity

Why it matters

How to prepare

Country perspectives

Where the most-relevant 6 countries stand on the core issues in play. Click through for the full country profile.

Thailand

Committed to strengthening national digital security and fostering international collaboration.

Role in topic

United States

A key partner in global cybersecurity initiatives, offering advanced technological solutions and policy expertise.

Role in topic

China

A major global player in digital technology and cybersecurity, with a focus on national digital sovereignty.

Role in topic

Singapore

A regional leader in cybersecurity, known for its proactive national strategies and robust digital infrastructure.

Role in topic

Israel

A global leader in cybersecurity innovation and defense technologies.

Role in topic

Estonia

A pioneer in digital governance and cyber defense, advocating for international cooperation and resilience.

Role in topic

Topics & background

The background behind each topic and the actors that shape it.

Cloud Security

Key players

Incident Response and Recovery

Key players

Artificial Intelligence and Machine Learning in Cyber Defense

Key players

Cybersecurity Innovations and Trends

Key players

Cyber Resilience for Critical Infrastructure

Key players

Emerging Cyber Threats

Key players

Artificial Intelligence and Automation in Cybersecurity

Key players

Resources

News, lessons, and country profiles to prep for CYSEC THAILAND 2026 – Thailand Cyber Shield: Advancing the Nation's Digital Security.

Recent reporting to ground your prep

Arming an archipelago: Is time running out for Europe's oldest DMZ? | Euronews

Comprehensive approach to security: Federal Council launches consultation on Switzerland's security policy strategy

Europe's June Heatwave: Infrastructure Crisis

Ukraine Drone Strikes Crimea Power Grid

Lessons

Bite-sized lessons to build the basics

Hidden Stakeholders

Engagement Strategies

Dynamic Analysis

Stakeholder Mapping Workshop

Courses

Guided courses that go deeper on the topic

Advanced Negotiation

Multilateral Negotiation

Policy Brief Writing

Conflict Resolution

The states in play, with the data that shapes their stance

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

By committee

Committees & topics

Why it matters

How to prepare

Country perspectives

Topics & background

Resources

Related conferences

Lawyers TED Talk: The Role of Thai Lawyers in International Law Competition (Inaugural)

2nd Government Cyber Resilience Summit – Thailand

5th NIC-NIDA Conference, 2026

CyberSecThailand Summit 2026

11th International Peace and Conflict Resolution Conference (PCRC2026)

CBRNe Summit Asia 2026

Frequently asked questions

Committees & topics

Why it matters

How to prepare

Country perspectives

Topics & background

Resources

Related conferences

Lawyers TED Talk: The Role of Thai Lawyers in International Law Competition (Inaugural)

2nd Government Cyber Resilience Summit – Thailand

5th NIC-NIDA Conference, 2026

CyberSecThailand Summit 2026

11th International Peace and Conflict Resolution Conference (PCRC2026)

CBRNe Summit Asia 2026

Frequently asked questions