OT-ISAC tracks 2026 Asia-Pacific cybersecurity policy shifts affecting critical infrastructure, OT and industrial operations

It covers substantive cybersecurity, critical-infrastructure and OT/ICS policy developments, excluding cyber incidents, threat activity, vulnerability announcements and generic defensive advisories.

It identifies priorities including mapping regulatory requirements to existing OT security controls, assessing supplier dependencies, documenting risk and governance decisions, and preparing for audits, incident response and operational recovery.

Japan’s Unified Standards for Cybersecurity Measures for Critical Infrastructure entered into force on Oct.1 this year, the National Cybersecurity Office (NCO) confirmed.

A revised Critical Infrastructure Cybersecurity Action Plan runs alongside, promoting incident preparedness, continuous improvement and public-private, cross-sector information sharing.

The Cyber Security Agency (CSA) issued CII Cybersecurity Code of Practice (CCoP) 2026 under the Cybersecurity Act on July 29.