ASEAN Cybersecurity Cooperation Strategy 2026–2030

The ASEAN Cybersecurity Cooperation Strategy 2026–2030 (ACCS 2026–2030) is ASEAN’s current regional strategic action plan for cybersecurity cooperation. It was developed by the ASEAN Network Security Action Council (ANSAC) and follows the earlier strategy covering 2021–2025. The ASEAN Secretariat describes the strategy as part of the region’s effort to create a safe and secure cyberspace through cooperation among Member States (ASEAN, ACCS 2026–2030).

What the strategy builds on

ASEAN’s cybersecurity cooperation began with a first strategy elevated from the ASEAN Cyber Capacity Programme introduced in 2016. That pioneering strategy focused on three connected areas: cybersecurity incident response, Computer Emergency Response Team (CERT) policy and coordination, and cybersecurity capacity building. The 2021–2025 strategy updated the regional approach as digital use and risks expanded. ACCS 2026–2030 is the next planning cycle rather than a replacement for the national cybersecurity laws or agencies of individual Member States (ASEAN, ACCS 2026–2030; ASEAN, digital-sector cooperation).

Regional cooperation areas

The strategy’s practical setting includes coordinated incident response, CERT cooperation, information sharing, policy and regulatory coordination, and regional cybersecurity capacity building. These mechanisms are intended to help Member States respond to threats that cross borders and to exchange operational experience, rather than to create one ASEAN cybersecurity regulator. ASEAN’s digital-sector materials describe the ASEAN Regional CERT as a mechanism for coordination, knowledge sharing, operational collaboration and strategic partnerships, while the strategy provides the broader cooperation context (ASEAN, digital-sector cooperation; ASEAN, ACCS 2026–2030).

The strategy also responds to a changing technology environment. Singapore’s regional cybersecurity policy statement identifies emerging-technology risks, including challenges associated with artificial intelligence, and the need to strengthen collective resilience against evolving threats. It frames ASEAN’s approach around trust, inclusivity and cooperation and points to the value of a coherent regional direction over the five-year strategy period (MDDI, ASEAN cybersecurity cooperation; ASEAN, ACCS 2026–2030).

Singapore’s role

Singapore contributes to ASEAN cybersecurity cooperation through its participation in ADGMIN and ANSAC processes and through regional capacity-building and incident-response institutions. Singapore also hosts the ASEAN-Singapore Cybersecurity Centre of Excellence, which supports regional training and policy cooperation, while the ASEAN Regional CERT has an operational facility in Singapore. These roles place Singapore within the regional architecture; they do not make Singapore the sole operator or decision-maker for ASEAN cybersecurity (ASEAN, digital-sector cooperation; MDDI, ASEAN cybersecurity cooperation).

ACCS 2026–2030 sits alongside, rather than absorbs, more specific ASEAN digital frameworks. The ASEAN Digital Masterplan 2030 sets the wider digital-transformation context; the ASEAN Guide on Anti-Scam Policies and Best Practices addresses scam calls and SMS; and the Enhanced ASEAN Submarine Cable Guidelines address cable protection and repair. Their subjects overlap in regional digital resilience, but they have different scopes and should not be merged into one cybersecurity law or agency (ASEAN, digital-sector cooperation; ASEAN Digital Masterplan 2030; ASEAN Guide on Anti-Scam Policies and Best Practices; Enhanced ASEAN Guidelines for Submarine Cable Resilience and Repair).

Legal and implementation boundary

ACCS 2026–2030 is a regional cooperation strategy, not directly applicable Singapore legislation. It can guide coordination, capacity building, information exchange and the development of compatible approaches, but each Member State remains responsible for its own laws, regulators, national CERT arrangements, incident obligations and enforcement. Publication of the strategy therefore does not by itself create a Singapore compliance deadline, impose one ASEAN technical standard or give an individual a new private claim (ASEAN, ACCS 2026–2030; ASEAN, digital-sector cooperation).