Measuring Cyber Risk Together: Strengthening ASEAN Cybersecurity Information Sharing

ASEAN’s growing digital integration is increasing exposure to cross-border cyber risks, but cybersecurity data remain fragmented across jurisdictions and sectors. Differences in definitions, reporting requirements, and institutional capacity make it difficult to compare risks, identify regional vulnerabilities, and develop evidence-based policies. This policy brief proposes a two-level approach: strengthening national systems for collecting and analysing cybersecurity statistics, and establishing an ASEAN Common Cybersecurity Statistics Framework to make national data comparable. It also recommends strengthening trusted regional intelligence-sharing mechanisms and sequencing implementation according to member states’ different levels of capacity. Together, these measures would help ASEAN move from fragmented incident reporting towards a more systematic regional understanding of cyber risk.