{"id":3718,"date":"2025-08-13T16:12:49","date_gmt":"2025-08-13T09:12:49","guid":{"rendered":"https:\/\/thereporter.asia\/eng\/?p=3718"},"modified":"2025-08-13T16:12:49","modified_gmt":"2025-08-13T09:12:49","slug":"thailand-energy-digital-security","status":"publish","type":"post","link":"https:\/\/thereporter.asia\/eng\/2025\/08\/thailand-energy-digital-security\/","title":{"rendered":"Thailand Fortifies Energy Sector Against Rising Digital Security Threats"},"content":{"rendered":"

A new era of stringent cybersecurity regulations is dawning for Thailand’s energy sector, as the government mandates urgent action to defend the nation’s critical infrastructure against a growing wave of sophisticated cyberattacks. With new rules set to take effect in January 2025, energy companies are on the clock to overhaul their digital defenses, transforming a national vulnerability into a pillar of cyber resilience.<\/b><\/h3>\n

The digital battlefield has expanded, and Thailand’s energy sector finds itself on the front lines. Cyberattacks are no longer distant threats but a persistent and escalating reality targeting the very core of the nation’s power infrastructure. <\/span>A recent study by Sophos starkly illustrates the danger, revealing that 62% of critical infrastructure organizations, including energy companies, have been hit by ransomware attacks. <\/span>This figure is significantly higher than the 49% average across other key industries like manufacturing, IT, and construction, highlighting the energy sector’s status as a prime target. <\/span><\/p>\n

The sector’s vulnerability is intrinsically linked to its rapid digitalization. <\/span>The push for modernization has led to a deep integration of two distinct technological realms: Information Technology (IT), which handles data processing and business applications, and Operational Technology (OT), the industrial control systems that manage the physical operations of power plants and grids. <\/span>The challenge lies in the fact that many of these critical OT systems were engineered and deployed long before the advent of modern, weaponized cyber threats. <\/span>As Thailand accelerates its digital transformation, a parallel and equally robust evolution in cybersecurity is not just recommended\u2014it’s imperative to safeguard operations and build lasting resilience. <\/span><\/p>\n

Government Mandates Usher in a New Standard of Security<\/h3>\n

Recognizing this clear and present danger, the Thai government has implemented a decisive legislative framework to fortify the nation’s digital defenses. The cornerstone of this initiative is the Cybersecurity Act B.E. 2562 (2019), a landmark law designed to safeguard national security by protecting Critical Information Infrastructure Organizations (CIIO) across all vital sectors, with a significant focus on energy. <\/span><\/p>\n

To execute this vision, the act established two pivotal bodies: the National Cyber Security Committee (NCSC)<\/a>, which sets the overarching policy direction, and the National Cyber Security Agency (NCSA)<\/a>, which is responsible for enforcement and operational execution. <\/span><\/p>\n

In a move that signals a major shift in compliance requirements, the NCSC has issued two critical notifications that will become effective in January 2025, compelling organizations to adopt a more rigorous and structured approach to cybersecurity. <\/span><\/p>\n

The first, the <\/span>“Notification on Standards for Determination of the Security Category for Data\/Information System,”<\/span><\/b> requires organizations to systematically classify their data and IT\/OT systems. <\/span> This classification is based on the potential impact of a security breach across three fundamental criteria:<\/p>\n