Additional proposed activity (also referred to as CBM#5): National strategies, policies and programs

Background: As the cyber domain grows in strategic relevance, it is essential for states to establish clear national guiding principles in this regard. Such principles provide the basis for national strategies, helping states coordinate internal efforts, allocate resources efficiently, and ensure cohesive action across ministries and stakeholders - particularly in times of crisis. They also promote transparency, predictability, and trust at the regional level. This measure aims to facilitate discussion on how ARF members conceptualize and design strategies for ICT security in ways suited to their national contexts. It contributes to the priority area “Establishment of Coordination Mechanisms within the ARF.”

Practice: Singapore introduced a concept paper in 2018 proposing a capacity-building workshop on cybersecurity strategy building. Canada later joined as co-sponsor, and the two states hosted a workshop in Singapore in 2019. The event gathered over 30 senior officials from ASEAN states, Australia, China, Korea, Russia, Timor Leste, and the US, with additional input provided by the OAS. Participants explored emerging cyber threat trends, frameworks for building national strategies, and took part in a simulation exercise on responding to a cyber operation. No further workshops on this specific topic have been held since.302

• Participating states exchanged experiences on developing national cybersecurity strategies through a dedicated regional workshop and simulation exercise involving policymakers and cyber experts.