Breaking News

Data Strategy and Data Regulation, The Cornerstones for Thailand’s Digital Economy. And 5G Cyber Security and Standards through the perspective of Surachai Chatchalermpun, Huawei Technologies (Thailand)

Data Strategy and Data Regulation, The Cornerstones for Thailand’s Digital Economy. And 5G Cyber Security and Standards through the perspective of Surachai Chatchalermpun, Huawei Technologies (Thailand)
January 05
14:58 2022

Exclusive Interview with Surachai Chatchalermpun – Thailand CSPO, Huawei Technologies (Thailand) Co., Ltd., views and recommendations on Thailand’s data strategy and regulations that directly affect the development of digital economy, including standards and cybersecurity for 5G.


In the Cyber Security field of Thailand, few people are accepted qualifications that are both pen and swords, know strategy and policy. Know the practice visionary and experienced leading the organization through the crisis of cyber threats.

Surachai Chatchalermpun, GDPR-CEPAS, CISSP, CSSLP, CISA, CISM, SSCP, CDPSE, CEH, ECSA, ISO27001, MIT, Harvard Cybersecurity executive certificate Thailand CSPO (Country Cyber Security & Privacy Officer) Huawei Technologies (Thailand) Co.,Ltd

Mr.Surachai Chatchalermpun is one of those “Cyber Security Guys” who have been accepted as such. With both qualifications and more than 15 years of experience, he was the top management in risk management policy making in big petrochemical company, securities company and government bank.

More than that he was a leader who solved cyber threats incident that recovered company come back from serious situation.

He has been selected to a member of committees such as the Thailand Information Security Association (TISA), Thailand Cloud Security Alliance (CSA) the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment.

And last year he was selected by IDG, the global technology media group in list of 10 of the top CIO/CISO and IT executives in the financial services industry across the ASEAN region.

Recently, Surachai Chatchalermpun departing again on the security career path with a new role as Thailand CSPO (Country Cyber ​​Security & Privacy Officer) at Huawei Technologies (Thailand) Co., Ltd., serving as consulting, policy making, including cyber security and personal data protection framework for Huawei Thailand, reporting directly to Abel Deng, CEO, Chairman of the Executive Board of Huawei Technologies (Thailand) Co., Ltd. serving as consulting, policy making, including cyber security and personal data protection framework for Huawei Thailand, reporting directly to Abel Deng, CEO, Chairman of the Executive Board of Huawei Technologies (Thailand) Co., Ltd.

CIO World&Business had the opportunity to interview Surachai Chatchalermpun on various issues related to cyber security and personal data protection. As you know in context of cyber security, there are many important aspects, but in this interview, we have two interesting issues that Surachai emphasized were:

1) Data Strategy and Data Regulation, The Cornerstones for Thailand’s Digital Economy and 2) 5G Cyber Security and Standards that Surachai pointed out about the standard framework for cyber security along with explaining the reasons and the necessity of all agencies in the 5G ecosystem should be aware and prepared to cope.

Data Strategy and Data Regulation, The Cornerstones for Thailand’s Digital Economy

“Data strategy and data regulation, it will be a key principle that directly affects the development of the country’s digital economy,” said Surachai “This is an opportunity that executives in each organization should embrace the megatrends as the key to data strategy policy, which will create new business opportunities, achieve data security, mitigate risks, and build international trust.”

There are 4 trends

Trends 1: Information services are growing rapidly, and service trade will share 50% global trade by 2040

Trends 2: Digital Economy is expanding from Connectivity and Computing Driven to Data and AI Driven

Trends 3: The world’s most valuable resource is no longer oil, but data

Trends 4: More than 50% of countries have released data strategies and regulatory policies to support development of digital economies.

Considering these four trends, the key question is What are the opportunities and directions for data strategy and data regulation? To sustainably support the pillars of the digital economy of Thailand, What should we do and How?

In this article, Surachai commented on each item as follows:

“Firstly, we should consider thoroughly to megatrends Information services for global trade (Service Trade). This will help to improve the rankings of service trade. Include adjusting the structure of the export of services both technology and data, this is a leap forward opportunity for businesses in macroeconomic policy implementation.”

“Second, stepping to the era of data-driven economy, the opportunity of Thailand is How can we should follow megatrends in new products and services in this era, such as creating a cloud service with highly secure and stable for country.

Including cloud, digital transformation in the industrial sector, build a smart city, digital banking, IoT (Internet of Things) services, and preparing to open up possibilities for products and services with AI (Artificial Intelligence) technology,” said Surachai.

“Third, when Data is the new oil to create economic stability, whoever has data and information will be a leader in innovation and economy. Therefore, what we should do is complying with conditions or regulations for data collection and protection to meet international standards. Thailand also pays attention to such matters by enforcing Personal Data Protection Act (PDPA).

“So, in my view, this can help to build trust for data subjects and using, more than that this can create confidence in new S-Curve industry such as digital service center, medical and health services and financial centers regionally”

Support Thailand as a digital hub in ASEAN.

Currently, Huawei Cloud has implemented a policy of building digital infrastructure in Thailand by creating two Data centers in Thailand to support Thailand as a digital hub in ASEAN. This is the way show Huawei has build the foundation and invested in Data centers as a service center for agencies or businesses to create opportunities for growth and confidence along with Thailand.

And this December 2021, Huawei will open the third Data center in Thailand with an investment of 1.4 billion baht, which is established and operates strictly according to all laws and regulations. The main purpose is to provide mutual backup capabilities between the three Data centers, ensuring zero data loss.

This is a financial-level data security capability, and provides more IoT and AI capabilities, with highly efficient information treatment system and information technology equipment. This will be an important infrastructure for businesses in the digital era.

5G Cyber Security and Standards

“We are entering the digital world which doing business relies on IT as a driver. Emerging technologies like cloud AI, IoT or 5G will drive digital business growth. At the same time, new challenges were created, including cyber security and protection of personal information causing organizations to fight against new forms of cyber threats complicated that we cannot ignore cybersecurity issues.”

“What has emerged has created a new approach to cyber security, which is making collaboration across all sectors at the national level for created industry standardization and highly reliable verification.”

“The collaboration across all sectors consists of 5 parts, first government agencies who acting supervisor from the policy, law, regulation, second is the Standard Organizations who define requirements, standard and best practice”

The third is Service Providers and Operators must provide stable service high reliability, no down time and SLA for services and system recovery. Forth is ICT Suppliers this group must develop technology, innovation, research products and solutions with data security processes.

And the last part is Business & Citizen must operate under strict rules with best practices, standards, and audits by the central authority responsible for supervision Increase confidence in data security processes

A key issue for the digital era driven by 5G communication infrastructure, in particular, standards and cybersecurity in the 5G era are composed of three layers:

The first layer is 5G information and communication technology equipment service providers that should be standardized, such as base stations and core networks or routers that develops devices to meet the 5G security standards

In the second layer is 5G Network Provider the main function of this group is installing network equipment securely at every step and has a systematic and continuous operation and maintenance of network security.

The third layer is the application-level security which requires compliance with the terms of the application service provider in security and service protection.

An important of 5G service delivery is ensuring the security of the device. Delivering existing and new services in the 5G era rely on connectivity from mobile networks. It is essentially based on fundamental technology that is safe, reliable and consistent with internationally recognized principles. To build confidence in service and to be a standard in the development of related infrastructure systems.

Surachai said “What I would like to explain on this agenda is The Network Equipment Security Assurance Scheme, or NESAS, is an industry-wide security assurance framework. It is designed to facilitate the improvement of the cybersecurity level of network equipment across all sectors.”

“It was formed through the cooperation of two international telecommunication standards, the GSMA (Global System for Mobile Association) and the 3GPP (3rd Generation Partnership Project). The GSMA is responsible for conducting assessments and audits and the 3GPP is responsible for establishing safety standards and assessment requirements and check.”

“That means those in the 5G ecosystem will conduct telecommunications network equipment safety tests according to NESAS, a framework for security standards for 5G telecommunications equipment that can be used as a single centralized security assessment. It was built to support operators, device manufacturer, inspection institutes, laboratories and government agencies. NESAS become the global standard for ensuring the cybersecurity of mobile communications in the 5G era.”

Huawei 5G Passed NESAS Benchmarks

Huawei 5G is the First to Complete NESAS Assessment

  • In March 2020, Huawei 5G RAN was the first to pass the GSMA NESAS audit.
  • In May 2020, Huawei 5GC was the first to pass the GSMA NESAS audit.
  • In December 2020, Huawei took the lead in completing the DEKRA SCAS test for 5G and LTE, becoming the supplier that has passed both of the GSMA NESAS assessment (including NESAS audit and SCAS test). DEKRA is the first GSMA-accredited laboratory in EUROPE as the NESAS security testing lab.

“Huawei is one of the 5G ecosystems that realized the importance of this. Therefore, please allow me to present guidelines to all departments especially in the telecommunication industry have worked together this will have a positive effect on the sustainable development of a comprehensive global security assessment and certification system for 5G technology.”

“Huawei has demonstrated and addressed NESAS standard, which is a fundamental condition for access to 5G telecommunication equipment, and has passed the test evaluation.

It is to build confidence in serving customers in Thailand that Huawei’s 5G devices have been recognized by laboratories around the world and agencies like GSMA and 3GPP, which will be helpful in enhancing 5G cybersecurity for the sustainable development of the country’s digital economy,” Surachai concluded.

อ่านบทสัมภาษณ์ภาษาไทย >> ยุทธศาสตร์และกฎระเบียบด้านข้อมูลของประเทศ, มาตรฐานและการรักษาความมั่นคงปลอดภัยไซเบอร์ 5G ผ่านมุมมองของสุรชัยฉัตรเฉลิมพันธุ์

Related Articles


No Comments Yet!

There are no comments at the moment, do you want to add one?

Write a comment

Write a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.