THE ASEAN ICT MASTERPLAN 2020
8. INFORMATION SECURITY AND ASSURANCE
Initiative 8.1 Strengthen Information Security in ASEAN
Create a trusted ASEAN digital economy
ACTION POINT
DESCRIPTION
TARGET/PROJECT
8.1.1 Develop
Regional Data
Protection Principles
Promote data
protection in ASEAN
by establishing
regional guidelines
1. Commission a study that compares personal
data privacy protection frameworks across AMS.
The study will identify current practices, develop
case studies, and disaggregate issues across
different levels – local, national, cross-border
and ASEAN
2. Develop an ASEAN guideline or framework
for personal data protection
8.1.2 Develop
Regional Network
Security Best Practices
Identify and develop
baseline ICT network
security principles and
promote their use
within ASEAN
Develop best practice guide for information and
network security in ASEAN, including cloud
computing
8.1.3 Develop
Regional Critical
Information
Infrastructure
Resilience Practices
Identify critical
information
infrastructures that
have strategic
imperatives and
develop coordinated
approaches to
protection in the
event of cyber-attacks
Commission a report to identify existing critical
information infrastructures and suggest best
approaches to coordinated protection and
response
Initiative 8.2 Strengthen Information Security Preparedness in ASEAN
Improve cyber emergency responses and collaboration
26
ACTION POINT
DESCRIPTION
TARGET/PROJECT
8.2.1 Strengthen
Cyber Incident
Emergency Response
Collaboration
Encourage
cooperation to create
a well-functioning
network of CERTs to
enable real-time
responses to online
security breaches
1. Conduct a feasibility study on establishing an
ASEAN CERT, including looking at possible
ownership models – whether by AMS
government or through Public-Private
Partnership (PPP)
2. Develop an Incident Reporting Framework,
including templates and standardised responses
to pre-identified 'threat levels' and attach types
3. Promote regular cyber security collaboration
and dialogue between governments, business
community and citizens through joint
awareness-raising campaigns and the exchange
of relevant materials
E. Strategic Thrusts, Initiatives, and Action Points
F. Implementation