KROEUNGCYBER

Introduction Cambodian enterprises face growing cybersecurity risks as digital adoption increases. This post examines the most significant threats. Top Threats Financial Fraud Mobile payment scams Banking trojans Business email compromise Ransomware Attacks Targeting SMEs with weak backups Double extortion tactics Sector-specific targeting Supply Chain Attacks Compromised vendors/partners Software supply chain risks Third-party credential theft Attack Trends Increasing use of AI-powered attacks More sophisticated phishing campaigns Growth in insider threats Mitigation Strategies Technical Controls ...

Introduction As Cambodian businesses increasingly adopt cloud services, understanding security implications becomes critical. This post outlines key considerations for secure cloud adoption. Key Challenges Data Sovereignty: Understanding where data is stored Shared Responsibility Model: Knowing provider vs customer security duties Compliance: Meeting Cambodian regulatory requirements Recommended Practices Infrastructure Use Cambodian-based cloud providers when possible Implement multi-factor authentication Encrypt data both in transit and at rest Operations Regular security audits and penetration testing Cloud-specific monitoring and logging Employee training on cloud security policies Governance Clear cloud usage policies Vendor risk assessment processes Incident response planning for cloud environments Conclusion Proper cloud security measures can help Cambodian businesses safely leverage cloud computing benefits while mitigating risks. ...

Introduction Cambodia is developing its data protection framework to align with international standards while addressing local needs. This post examines the current legal landscape. Current Regulations Law on E-Commerce (2019): Contains provisions on data protection Sub-Decree on Data Protection (Draft): Expected to be enacted in 2025 Sector-Specific Rules: Banking and telecom regulations with data provisions Key Requirements Consent: Obtaining clear user consent for data processing Purpose Limitation: Using data only for specified purposes Data Localization: Requirements for certain types of data Compliance Challenges Lack of comprehensive standalone data protection law Limited awareness among local businesses Enforcement mechanisms still developing Recommendations Conduct data mapping and inventory Implement privacy-by-design principles Prepare for upcoming regulations Appoint data protection officers where needed Conclusion While Cambodia’s data protection regime is evolving, businesses should proactively adopt best practices to ensure compliance. ...

Introduction Cambodia’s rapid digital transformation has brought both opportunities and cybersecurity challenges. As internet penetration grows to over 50% of the population and mobile money services expand, the attack surface for cyber threats has increased significantly. Current Threats Phishing Attacks: Targeting banking and financial services Ransomware: Affecting SMEs with limited security budgets Data Breaches: From inadequately secured government and business systems Regulatory Framework Cambodia’s draft Cybersecurity Law (expected 2025) ASEAN Cybersecurity Cooperation Strategy National Internet Gateway implications Recommendations Public-private partnerships for threat intelligence sharing Capacity building through cybersecurity education Adoption of international security standards Conclusion While challenges remain, Cambodia’s growing tech sector presents opportunities to build a more secure digital ecosystem from the ground up. ...