JP-US-EU Industrial Control Systems Cybersecurity Week for the Indo-Pacific Region Held

* IPA ICSCoE website
** Invited countries/regions: ASEAN member states, India, Bangladesh, Sri Lanka, Mongolia and Taiwan

1. Outline of the event

METI and the ICSCoE hosted the JP-US-EU Industrial Control Systems Cybersecurity Week in collaboration with the US government (DHS/CISA, DOS) as well as the European Commission (DG CONNECT/ENISA, EEAS) from November 18 to 21, 2025.

Cybersecurity measures are more effective when implemented jointly by several organizations or countries. To combat the growing threats stemming from increased digitization and interconnectedness, the geopolitical importance of cybersecurity and cooperation among like-minded countries cannot be overstated. The Cybersecurity Week was first launched in 2018 by Japan in collaboration with the U.S. with the aims of enhancing cybersecurity capacity within the Indo-Pacific region and reinforcing collaboration with respective countries. Recognizing its value, the European Union (EU) officially joined this annual ICS cybersecurity exercise from 2021 onwards.

The ICS Cybersecurity Week hosts participants from the Indo-Pacific region who are information and operational cybersecurity experts from critical infrastructure operators, cybersecurity experts from national computer security incident response teams (CSIRTs), and policy experts from relevant ministries and authorities.

This year, in order to maximize efforts to strengthen supply chain resilience among Japan, the United States, and the EU, as well as to enhance capacity building in the Indo-Pacific region, the scale of the exercise was significantly expanded—resulting in approximately five times more participants compared to last year when including remote attendees. We conducted industry-specific workshops using virtual scenarios that incorporate industry-specific risks and case studies, as well as hands-on exercises on cyberattacks utilizing AI in the industrial control sector. Additionally, as a new program, the European Union Agency for Cybersecurity (ENISA) hosted workshops. Furthermore, seminars were organized with experts from Japan, the U.S., and the EU, as well as representatives from critical infrastructure companies. Through this event, participants were able to acquire knowledge, enhance their thinking on cybersecurity policy and tangibly improve their cybersecurity capabilities.

The program also contributed to establishing a common understanding on ICS cybersecurity and strengthening relationships between the Indo-Pacific region and Japan, the U.S. and the EU, which will become a foundation for further international cooperation in jointly addressing growing cybersecurity threats. Under the vision of a Free and Open Indo-Pacific, METI and the ICSCoE will continuously endeavor to enhance the cybersecurity capacity of the whole region, in particular by reinforcing measures for critical infrastructure.

2. Training program

Opening remarks from Japan, the U.S. and the EU

• 

• 

• 

Keynote speeches

• 

• 

Program and names of speakers (PDF:128KB)

Workshop (Sector-specific discussions)

Using virtual scenarios that incorporate industry-specific risks, case studies, and security/safety requirements, participants engaged in group discussions simulating cyberattacks. They had an opportunity to learn practically how to address cyber risks faced by businesses and organizations.
  

Hands-on Training

Considering the rapid adoption of AI technology in industrial control systems, participants were introduced to case studies of AI applications using a simple robotic arm and demonstrated real-time cyberattacks against the arm. Additionally, participants acquired knowledge of XAI (Explainable AI), an emerging solution to risks posed by AI, as well as the importance of AI governance.

Related links

• Cybersecurity and Infrastructure Security Agency, CISA
• Directorate-General for Communications Networks, Content and Technology
• IPA, Industrial Cyber Security Center of Excellence, ICSCoE

Division in Charge

Cybersecurity Division, Commerce and Information Policy Bureau