The sessions on final day explored growing integration of operational technology and cloud environments, highlighting both the opportunities and associated risks. Participants examined practical use cases such as cloud-enabled SCADA systems and remote monitoring, while discussing how increased connectivity can enhance efficiency and visibility.  

Participants also focused on OT and cloud risk assessment and mitigation, drawing from international and EU standards and guidance. Through a practical exercise, participants conducted a risk mapping of a hybrid OT-cloud environment, helping to identify critical assets, potential threats and appropriate mitigation measures to support secure and resilient system design.   

Over the course of four days, the training provided a comprehensive overview of cyber risks affecting both operational technology and cloud environments, combining strategic perspectives and policies with hands-on practice. Participants examined the evolving threat landscape, key differences between IT and OT security, secure OT-cloud integration, cloud threat modelling, identity and access management, incident response and cyber resilience. Participants understood that effective protection of critical infrastructure does not only depend on technology, but preparedness, clear processes and coordinated action across technical, policy and operational levels. 

The training highlights the importance of international cooperation in addressing shared cyber threats to critical infrastructure. As operational technology and cloud environments face similar and interdependent cyber risks across borders, strengthening cybersecurity capabilities requires sustained collaboration, knowledge exchange and alignment with international standards. This training reflects the EU’s continued commitment to supporting ASEAN partners in building cyber resilience, fostering trusted partnerships and promoting secure and open digital environments that enable and underpin  secure public services, economic stability and cross-regional security. 

Training was led by the EU CyberNet experts  Aldolfo Caldeira from Portugal, Radoslaw Gnat from Poland and Roman Konicek from the Czech Republic. Training was attended by government agencies from Brunei, Indonesia, Laos, Malaysia, the Philippines, Singapore, Vietnam, Timor-Leste and Thailand.    

Training was delivered in collaboration between the European Union (facilitated by the EU Delegation to Japan and the EU Delegation to Thailand and implemented by the EU-funded project EU CyberNet), the ASEAN-Japan Cybersecurity Capacity Building Centre (AJCCBC), the National Cyber Security Agency of Thailand (NCSA) and the Japan International Cooperation Agency (JICA).   

• Photos
• Day 1 overivew
• Day 2 overivew
• Day 3 overview