Risk-Based Protection of Critical Information Infrastructure: A Policymaker’s Guide

Risk-Based Protection of Critical Information Infrastructure: A Policymaker’s Guide

Access Partnership’s Coalition for Cybersecurity in Asia-Pacific (CCAPAC) has published a new report examining critical information infrastructure and how to regulate it through a risk-based approach.

Digital transformation has been a key agenda for many governments’ modernisation efforts. In the wake of the COVID-19 pandemic, there has been an acceleration of effort to ensure that critical infrastructure and information services which serve them are able to continue running in the event of another global catastrophe and remain resilient against disruption.

CCAPAC launched its 2023 report on Risk-Based Protection of Critical Information Infrastructure that aims to act as a guide for policymakers to better understand how to develop a strong risk-based approach towards regulating critical information infrastructure. The report reviews the definition of critical information infrastructure, assesses examples of regulatory approaches, and identifies principles and recommendations to consider in approaching regulations proportionately and effectively.

About the Coalition for Cybersecurity in Asia-Pacific:

CCAPAC is a group of dedicated industry stakeholders who are working to positively shape the cybersecurity environment in Asia through policy analysis, engagement, and capacity building. The coalition comprises of Amazon Web Services, Becton Dickinson, Cisco Systems, MasterCard, and Qualcomm. Access Partnership is the secretariat for CCAPAC.

Download Risk-Based Protection of Critical Information Infrastructure: A Policymaker’s Guide by filling out the form below.


Related Articles

Building Resilient Healthcare Supply Chains Across Asia Pacific

Building Resilient Healthcare Supply Chains Across Asia Pacific

The COVID-19 pandemic exposed critical vulnerabilities in global healthcare supply chains. In response, this initiative, led by the National Center...

16 Jun 2025 Reports
Why the Revision of the Cybersecurity Act is the Most Consequential Regulatory Development of 2025 (and Beyond)

Why the Revision of the Cybersecurity Act is the Most Consequential Regulatory Development of 2025 (and Beyond)

When the original EU Cybersecurity Act (CSA) became applicable in 2021, it did so with relatively little fanfare. At the...

10 Jun 2025 Opinion
The UK’s Digital and Data Opportunity: Public Services for a New Era

The UK’s Digital and Data Opportunity: Public Services for a New Era

The UK government’s forthcoming spending review will be a clear indication of the government’s commitment, revealing through its funding allocations...

9 Jun 2025 Reports
Why We Need Human Risk Management Against AI-Enabled Cyber Threats

Why We Need Human Risk Management Against AI-Enabled Cyber Threats

This content was originally posted on ccapac.asia. The Coalition for Cybersecurity in Asia-Pacific (CCAPAC) is a group of industry stakeholders dedicated...

31 May 2025 Opinion