Academia
We have the blueprints to defend our digital sovereignty, but without real enforcement power, adequate funding and urgency on AI and quantum threats, the next massive breach is already penciled in.
The logo of the National Cyber and Encryption Agency (BSSN) is seen on the agency’s office in Jakarta on March 15, 2019. (JP/Dhoni Setiawan)
Across Southeast Asia, rapid digitization has quietly rewritten the rules of state legitimacy and national defense. How each government handles cybersecurity reveals who is actively building resilience and who is simply improvising under pressure.Singapore set the regional standard early. Since launching its Cyber Security Agency in 2015, the city-state has systematically built a cohesive ecosystem of clear laws, skilled personnel and global partnerships. Malaysia took a pragmatic operational path, dividing responsibilities between CyberSecurity Malaysia and the National Cyber Security Agency while leaning on strong public-private coordination.
Thailand and Vietnam moved aggressively on legislation, passing sweeping frameworks in 2019 and 2018 that allowed them to scale their institutional defenses quickly. Meanwhile, Cambodia, Laos and Myanmar are still establishing baseline Computer Emergency Response Team (CERT) capabilities and early legal structures.
