National Cyber Security Agency

Scope

Lead agency for protecting Thailand's Critical Information Infrastructure (CII) sectors — government, finance, energy, public health, ICT, transport — from cyber threats, and coordinator of national cyber-incident response (ThaiCERT).

Key Powers

• • Designate Critical Information Infrastructure entities and set sector-specific security standards
• • Issue cybersecurity-incident response orders during national-level cyber crises
• • Coordinate ThaiCERT operations and cross-sector threat intelligence
• • Inspect CII entity security posture and require remediation
• • Refer criminal cyber matters to the Royal Thai Police's Cyber Crime Investigation Bureau

Enforcement Examples

• Public alerts on major Thai-sector cyber incidents (with named or anonymised parties)
• CII-entity remediation directives published in aggregate annual reports

How Foreigners Interact

Foreign-incorporated CII suppliers (cloud providers, fintech, telecom) operating in Thailand may be designated CII and become subject to NCSA reporting and incident-response obligations; foreigners affected by Thai cyber incidents may file reports with ThaiCERT.

Related Laws & Topics