The recent SolarWinds and Colonial Pipeline cyberattacks have highlighted serious vulnerabilities in US critical infrastructure. ASEAN governments are ramping up the security of their critical infrastructure through regulatory measures and initiatives such as the CII Supply Chain Programme in Singapore and MyDigital in Malaysia. It is crucial that operational technology (OT) systems are not directly connected to the internet, says Lim Thian Chin, director of the Critical Information Infrastructure Division at the Cyber Security Agency of Singapore. The common concern for cyber-physical vulnerabilities is to. ensure that OT systems are. not connected to IT systems or directly to the. internet.”]