<<

Last Updated: March 2021

CYBERSECURITY POLICY

Strategy Documents

National Cybersecurity Strategy 2017-2021 Office of the National Security Council

Identifies the following goals:

1. Defense: it is necessary to have means and tools to protect the State from ever-increasing cyber threats to ensure the network and data within the country are protected and flexible; 2. Address threats: the State must strive to become a difficult target, and investigate attacks by arresting and prosecuting offenders 3. Development: the State must support research and development in science and technology, cyber security, and train skilled personnel capable of responding to specific needs.

Source October 2017

STRUCTURE

National Centre or Responsible Agency

Ministry of Digital Economy and Society (MDES) Royal Thai Government

Mission includes:

To suggest the national policy and plan on digital development for economic and society; policy and plan on statistics, meteorology, including measures, law and regulations on digital for economic and society; and monitoring, regulating and assessing the implementation from the aforementioned national policy and plan; To regulate digital law,information and communication technology within the responsibility, including to regulate, support and coordinate on cyber security.

Formerly the Ministry of Information and Communication Technology.

Source Source 2

Key Positions

Minister of Digital Economy and Society Ministry of Digital Economy and Society (MDES) Source

Dedicated Agencies and Departments

Electronics Transactions Development Agency (acting National Cybersecurity Agency) Ministry of Information and Communication Technology (MICT) To develop, promote and support Thailand’s electronic transactions; and provide an IT infrastructure which facilitates electronic transactions, helping businesses related to electronic transactions and creating secure, safe and reliable IT standards and communication Source Source 2 Thailand Last Updated: March 2021

2011

High-Tech Crime Division Royal Thai

Mission is to reduce the gap between the knowledge of police officers and the knowledge of technology, and to help police officers around the country in crime-related litigation.

Source Source 2

National Cyber Security Committee (NCSC) Prime Minister and the Ministry of Digital Economy and Society (MDES)

The committee agreed on the establishment of a new temporary agency to take care of national cyber security prior to the enactment of related laws.

Source 2018

National CERT or CSIRT

ThaiCERT National Electronics and Computer Technology Center (NECTEC)

Computer Security Incident Response Team (CSIRT) for Thailand; provides an official point of contact for dealing with computer security incidents in Thai Internet community; Collaborates with Thai government sector, organizations, universities, ISPs and other relevant entities to handle computer security incidents in Thailand; Coordinates with both globally and regionally trusted CSIRTs in responding to computer security incidents; member to Forum of Incident Response and Security Teams (FIRST) and Asia Pacific Computer Emergency Response Team (APCERT).

Source Source 2 2000 (established); 2011 (reorganized)

In Progress or Proposed

(proposed) National Cybersecurity Agency and Hacking Training Centre Ministry of Digital Economy and Society Source January 2018

LEGAL FRAMEWORK

Legislation

Cyber Security Act B.E. 2562

Source Source 2 26 May 2019 (entered into force)

Computer-Related Crime Act, B.E. 2550 (2007) Thailand Last Updated: March 2021

Outlines penalties for computer-related offences and identifies competent officials; amendment specifies additional offences.

Source Source 2 10 June 2007; 16 December 2016 (amended)

Personal Data Protection Act B.E. 2562 (PDPA)

PDPA offers data protection regulations against the misuse of personal data that has been collected from individuals in Thailand; In the process of being updated, and full implementation and compliance are expected by 1 June 2021.

Source 27 May 2019

COOPERATION

UN Processes

Expressed Views at the Open-Ended Working Group on Developments in the Field of Information and Telecommunications in the Context of International Security

Source Source 2 2019/2020

Bilateral and Multilateral Cooperation

Memorandum of Understanding on Cyber and Digital Cooperation, Thailand-Australia

The purpose of the MoU is to promote cooperation in the fields of cyber affairs and the digital economy between Thailand and Australia.

Source Source 2 10 January 2019

Cooperation, Thailand-Russia Established and stable channel of communication between the Russian Security Council and Thailand in order to respond in atimely manner to new challenges and threats, including in the field of information security. Source 28 February 2018

Agreement on cooperation, Iran-Thailand Minister of Digital Economy and Society Collaboration in IT, software, hardware, and cybersecurity Source 9 August 2017

"Strengthening and Enhancing Cybersecurity Cooperation in the ASEAN : Towards an Integrated Approach in Addressing Transnational Crimes” (host) Ministry of Foreign Affairs, the Ministry of Defence, and the Ministry of Digital Economy and Society Workshop was attended by representatives from ASEAN Member States, with resource persons and guest speakers from outside ASEAN Source 29 June 2017 Thailand Last Updated: March 2021

Cybercrime Agreement, Australia-Thailand Intensification of co-operation on cybercrime; Australia will also provide support in "cybercrime digital forensic development" to the Thai Royal Police, national security, and foreign affairs officials. Source 8 June 2017

Digital Cooperation, Portugal-Thailand Minister of Digital Economy and Society Discussions to initiate digital cooperation with special focus on cyber security Source 8 February 2017

Regional Workshop on Cybersecurity: Norms in Cyberspace (host) Ministry of Foreign Affairs, the Office of the National Security Council, and the Electronic Transactions Development Agency

Two-day workshop brought experts working in the area of cyber security and norms to speak and exchange views with representatives from ASEAN Member States.

Source 19-20 December 2016

Framework Cooperation Memorandum of Understanding, Bangladesh-Thailand Ministry of Digital Economy and Society In the ICT and telecom sectors for knowledge sharing, technical cooperation, training, bilateral investments, women in IT and sharing of best policy practices including on cyber security and BPOs Source 10 October 2016

Cybersecurity Alliance for Mutual Progress - CAMP Initiative, Member Electronics Government Agency; Electronic Transactions Development Agency Network platform to lift up the overall level of cybersecurity of members through development experiences and trends sharing. Source 11 July 2016

Memorandum of Understanding in the field of ICT, Singapore-Thailand Minister of Information and Communication Technology Covers cooperation in areas such as developing electronic government services; boosting Digital Technology start-up ecosystems; sharing both countries' experiences in cyber security; as well as training and capacity development programme Source 31 May 2016

Global Forum on Cyber Expertise (GFCE), Member

A global platform for countries, international organizations and private companies to exchange best practices and expertise on cyber capacity building

Source Source 2 2018 (member since)

ICT Cooperation Agreement, Montenegro-Thailand Minister of Information and Communication Technology Thailand Last Updated: March 2021

Commitment to developing technologies aimed at achieving overall economic prosperity. Source 19 November 2013

Select Activities

Thailand Cybersecurity Week Electronics Transactions Development Agency, Ministry of Digital Economy and Society

To strengthen cybersecurity knowledge

Source 26-30 June 2017

Membership

Association of Southeast Asian Nations (ASEAN)

International Telecommunications Union (ITU)

United Nations (UN)