Awareness Training on Guidance for CSIRT Establishment and Cyber Incident Handling (24th June 2026)
The awareness training “Guidance for CSIRT Establishment and Cyber Incident Handling” was conducted on 24th June 2026 in Phnom Penh, targeting Government Organizations, Critical Infrastructure (CI) Operators, and Educational Institutions in Cambodia.
As part of the project activities, various awareness materials are being developed to strengthen the capacity of organizations in Cambodia to establish and operate Computer Security Incident Response Teams (CSIRTs).
The training was designed to provide participants with the knowledge required to establish and manage CSIRTs effectively, as well as to improve their incident response capabilities through practical exercises and discussions on cyber incident handling procedures. The training was planned and delivered by officers from the Ministry of Post and Telecommunications (MPTC) based on the contents of the following awareness materials developed under the project:
(1) Guide to CSIRT Establishment
A reference document that explains the fundamental concepts and key considerations for establishing and operating a CSIRT. It provides a systematic overview of CSIRT roles, functions, and organizational structures required for effective cybersecurity operations.
(2) Cyber Incident Handling Manual
A practical guide describing the fundamental processes of cyber incident handling, including detection and analysis, containment, eradication, recovery, and post-incident activities. The manual is developed with reference to international standards and best practices.
(3) Cyber Incident Playbook
A collection of Standard Operating Procedures (SOPs) that provides detailed response procedures for various types of cyber incidents, enabling organizations to respond consistently and effectively when incidents occur.
A total of 36 participants attended the awareness training. The participants represented a wide range of organizations, including government organizations such as the Ministry of Interior, the Ministry of Foreign Affairs and International Cooperation, and the Ministry of Economy and Finance. The training also invited representatives from CI Operators, including Electricité du Cambodge and Phnom Penh Water Supply Authority, as well as participants from educational institutions.
Through the training, participants gained a better understanding of the fundamental concepts and operational approaches for CSIRT establishment, as well as the incident handling process for responding to cyber incidents. It is expected that the knowledge and experience acquired during the training will contribute to the establishment and enhancement of CSIRT operations within participating organizations. Furthermore, the communication network established through a social networking platform following the training is expected to strengthen coordination among organizations and sectors, thereby contributing to the improvement of cyber resilience in Cambodia.
Furthermore, this initiative is related to the “Digital and Cybersecurity” sector, one of the 17 strategic fields under Japan’s Growth Strategy. It contributes to the development of cybersecurity professionals, the enhancement of critical infrastructure resilience, and the promotion of inter-organizational collaboration. In addition, by sharing the knowledge and experience gained through this project, the initiative is expected to contribute to improving cybersecurity across the broader region, including Japan.
