Thailand: Adopted NCSC Minimum Standards for Data and Information Systems B.E. 2566 (2023)

On 18 December 2023, the National Cyber Security Committee (NCSC) adopted an order on the Minimum Standards for Data and Information Systems B.E. 2566. These standards outline cybersecurity control measures to improve the confidentiality, integrity, and availability of critical national information systems. Organisations must implement measures based on their risk levels (low, medium, and high). The measures include risk assessments, incident response plans, asset management, and cybersecurity awareness training, among others, tailored to the systems' cybersecurity risk levels.