Achieving Resilience at ASEAN Japans 网络安全 Capacity Building Centre

Realizing the challenges in building a sufficient competent cybersecurity workforce, the ASEAN-Japan 网络安全 Capacity Building Centre (AJCCBC) was established with the ambition to enhance the capacity of a cybersecurity workforce within the Southeast Asia region in the hope of creating a more vigorous future cyber landscape. AJCCBC had been providing in-person hands-on cybersecurity training sessions, 主要关注事件响应, digital forensics and malware analysis for many years.

The AJCCBC management team observed participants and determined that the most practical learning method that currently exists is instructor-led in-person training, where the trainees are able to interact with the instructors and one another.

However, when the COVID-19 pandemic began, it affected the way humans live and learn. In spite of unforeseen operational challenges that the pandemic created, AJCCBC仍然需要继续它的使命, but it found it needed increase its resilience and adaptability. During the past two years of the pandemic’s global disruption, AJCCBC deployed several procedures to reduce the pandemic’s effects on operations:

• 确定- - - - - -Initially, AJCCBC paused to analyze how the pandemic had affected operations. Clearly, the provision of in-person activities was affected the most. 不幸的是, halting operations came with a price in operational and financial terms, 所以需要尽快找到解决方案.
• 回应,to the problems needed to be identified immediately and effective solutions proposed quickly. 当时, the best alternative was to migrate the training from a face-to-face format to online courses. Similar to other project initiatives that included contingency considerations, AJCCBC had already planned business continuity operations for the entire project duration as well as budget to address diverse situational needs. 结果是, they just needed to revise the operation plan for the rest of the project by proposing an extension and re-allocation of the provided budget without increasing the cost. The content was also modified to increase suitability with the new online format. 以解决此更改可能存在的缺点, AJCCBC decided that it would be too risky to provide participants with the modified training content straight away and provided a trial voluntary participation (preview training). 此外, they added a new way to provide an effective remote learning experience with a new online learning management system. They used the available content previously developed and transformed it into micro-learning lessons where participants could conveniently learn from anywhere and at any time without having to physically travel and risk exposure to COVID-19.
• 评价- - - - - -As the situation evolved over months and years, the process did not stop there. AJCCBC continued to monitor the pandemic situation closely and assess the effectiveness of the online virtual training and micro-learning provision through a cybersecurity workforce survey where participants had an opportunity to share their feedback and opinions a year after the switch to the online training format. 调查表明, compared to in-personal training before the COVID-19 pandemic and despite the limitations of online instructor-led training, participants still learned effectively and enjoyed the experience provided by AJCCBC.

AJCCBC’s demonstration of resilience and accomplishment did not occur overnight. They relied on being alert to any unforeseen challenges to readily deploy alternative solutions to maintain operational continuity. 此外, 他们得到了盟友的支持, 包括东盟成员国吗, 以及日本政府, which provided the funding and the ASEAN secretariat, in overcoming such a demanding pandemic situation. The case study on resilience can be useful to others who continue to develop and provide resilient cybersecurity capacity building efforts in the future.

编者按: For further insights on this topic, read the authors’ recent Journal article, “东盟在能力建设中的韧性”， ISACA杂志，第4卷2022.

ISACA杂志 今年满50岁! Celebrate with us—and do not forget you can still receive the print copy by visiting your MyISACA仪表板 选择加入!